aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMichael Niedermayer <michaelni@gmx.at>2012-06-01 15:52:20 +0200
committerMichael Niedermayer <michaelni@gmx.at>2012-06-09 21:36:10 +0200
commit3074e8f78c4d84f93c1bdc05f36f0bce8b8a830f (patch)
treeca7c87df7d8307ca77b78571ffffe0f5d78871ef
parente37599001cefd7efb683c8228feedf3d291ef1db (diff)
downloadffmpeg-3074e8f78c4d84f93c1bdc05f36f0bce8b8a830f.tar.gz
yopdec: check frame oddness to be within supported limits
Fixes Ticket1365 Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit febc013dc5d6db1535a4f91cf02fa8089038937c) Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
-rw-r--r--libavcodec/yop.c4
1 files changed, 4 insertions, 0 deletions
diff --git a/libavcodec/yop.c b/libavcodec/yop.c
index 69f2e8e816..7f933b5f46 100644
--- a/libavcodec/yop.c
+++ b/libavcodec/yop.c
@@ -223,6 +223,10 @@ static int yop_decode_frame(AVCodecContext *avctx, void *data, int *data_size,
s->low_nibble = NULL;
is_odd_frame = avpkt->data[0];
+ if(is_odd_frame>1){
+ av_log(avctx, AV_LOG_ERROR, "frame is too odd %d\n", is_odd_frame);
+ return AVERROR_INVALIDDATA;
+ }
firstcolor = s->first_color[is_odd_frame];
palette = (uint32_t *)s->frame.data[1];