changeset 4270:758ba4a18478 libavcodec

fix crash when decoding a truncated H264 slice patch by Alexander Chemeris % ipse P ffmpeg A gmail.com % Original thread: date: Dec 5, 2006 7:26 PM subject: [Ffmpeg-devel] [PATCH] Fix crush when truncated slice passed to H.264 decoder
author gpoirier
date Tue, 05 Dec 2006 22:18:19 +0000
parents c37ea749711e
children 8cb3d28d7e40
files h264.c
diffstat 1 files changed, 4 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- a/h264.c	Tue Dec 05 22:05:09 2006 +0000
+++ b/h264.c	Tue Dec 05 22:18:19 2006 +0000
@@ -4883,6 +4883,10 @@
 
     if(total_coeff==0)
         return 0;
+    if(total_coeff<0) {
+        av_log(h->s.avctx, AV_LOG_ERROR, "corrupted macroblock %d %d (total_coeff<0)\n", s->mb_x, s->mb_y);
+        return -1;
+    }
 
     trailing_ones= coeff_token&3;
     tprintf("trailing:%d, total:%d\n", trailing_ones, total_coeff);