diff options
| author | Michael Niedermayer <michaelni@gmx.at> | 2012-03-31 21:42:50 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michaelni@gmx.at> | 2012-03-31 21:42:50 +0200 |
| commit | d3db8988d5befd8702a748cf1957415677bfe75c (patch) | |
| tree | f06a8d5c422d58d266c6143e49b578ab9180eba3 | |
| parent | 3768445be80090f2c12afa5eb95152dcd389b616 (diff) | |
| download | ffmpeg-d3db8988d5befd8702a748cf1957415677bfe75c.tar.gz | |
indeo4: check that num_mbs matches
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
| -rw-r--r-- | libavcodec/indeo4.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/libavcodec/indeo4.c b/libavcodec/indeo4.c index 9b013e8321..3dd58dc93b 100644 --- a/libavcodec/indeo4.c +++ b/libavcodec/indeo4.c @@ -490,6 +490,11 @@ static int decode_mb_info(IVI4DecContext *ctx, IVIBandDesc *band, mv_scale = (ctx->planes[0].bands[0].mb_size >> 3) - (band->mb_size >> 3); mv_x = mv_y = 0; + if (((tile->width + band->mb_size-1)/band->mb_size) * ((tile->height + band->mb_size-1)/band->mb_size) != tile->num_MBs) { + av_log(avctx, AV_LOG_ERROR, "num_MBs mismatch %d %d %d %d\n", tile->width, tile->height, band->mb_size, tile->num_MBs); + return -1; + } + for (y = tile->ypos; y < tile->ypos + tile->height; y += band->mb_size) { mb_offset = offs; |