# HG changeset patch
# User iive
# Date 1234824390 0
# Node ID 5e70bdb97d0c2d2090aabb9d385ef8bc26892ad6
# Parent  49817775b44f5944a2c10a0d29e1e18ac5523987
Thoroughly check all fields set by the application in xvmc struct.

diff -r 49817775b44f -r 5e70bdb97d0c mpegvideo_xvmc.c
--- a/mpegvideo_xvmc.c	Mon Feb 16 22:23:47 2009 +0000
+++ b/mpegvideo_xvmc.c	Mon Feb 16 22:46:30 2009 +0000
@@ -90,7 +90,11 @@
         return -1;
     }
     if (render->allocated_mv_blocks   < 1 ||
-        render->allocated_data_blocks < mb_block_count) {
+        render->allocated_data_blocks <  render->allocated_mv_blocks*mb_block_count ||
+        render->start_mv_blocks_num   >= render->allocated_mv_blocks                ||
+        render->next_free_data_block_num >
+                        render->allocated_data_blocks -
+                        mb_block_count*(render->allocated_mv_blocks-render->start_mv_blocks_num)) {
         av_log(avctx, AV_LOG_ERROR,
                "Rendering surface doesn't provide enough block structures to work with.\n");
         return -1;