# HG changeset patch # User michael # Date 1170987694 0 # Node ID ff5472c81ab8eac4b022664991a2a36055b48686 # Parent 665d7cd95fd3af849575c0f50d5753dfd88f4cfb fix segfault with lol-ffplay2.mpg (dunno if this is exploitable, probably not easily) diff -r 665d7cd95fd3 -r ff5472c81ab8 mpeg12.c --- a/mpeg12.c Fri Feb 09 02:02:09 2007 +0000 +++ b/mpeg12.c Fri Feb 09 02:21:34 2007 +0000 @@ -2593,6 +2593,10 @@ break; } } + if(s->mb_x >= (unsigned)s->mb_width){ + av_log(s->avctx, AV_LOG_ERROR, "initial skip overflow\n"); + return -1; + } s->resync_mb_x= s->mb_x; s->resync_mb_y= s->mb_y= mb_y;