# HG changeset patch # User michael # Date 1230314789 0 # Node ID 88e8b4f81275ae7123d6e788205b3b38b669b517 # Parent 87284151c592992e35a325ed84a864dcbb190f21 Fix yet another sechole. diff -r 87284151c592 -r 88e8b4f81275 faxcompr.c --- a/faxcompr.c Fri Dec 26 17:51:10 2008 +0000 +++ b/faxcompr.c Fri Dec 26 18:06:29 2008 +0000 @@ -156,10 +156,11 @@ } static int decode_group3_2d_line(AVCodecContext *avctx, GetBitContext *gb, - int width, int *runs, const int *runend, const int *ref) + unsigned int width, int *runs, const int *runend, const int *ref) { - int mode = 0, offs = 0, run = 0, saved_run = 0, t; + int mode = 0, saved_run = 0, t; int run_off = *ref++; + unsigned int offs=0, run= 0; runend--; // for the last written 0 @@ -200,7 +201,7 @@ } saved_run = 0; offs += run; - if(offs > width){ + if(offs > width || run > width){ av_log(avctx, AV_LOG_ERROR, "Run went out of bounds\n"); return -1; }