aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMichael Niedermayer <michaelni@gmx.at>2008-12-26 18:14:59 +0000
committerMichael Niedermayer <michaelni@gmx.at>2008-12-26 18:14:59 +0000
commiteb0094b224389fd7c337e3bf354b0d9120f9e961 (patch)
tree299c36fb661ea188cff618982f2d33f53b65d156
parent268309750b56803642f12706aeb0576cd8183570 (diff)
downloadffmpeg-eb0094b224389fd7c337e3bf354b0d9120f9e961.tar.gz
And another sechole ...
Originally committed as revision 16346 to svn://svn.ffmpeg.org/ffmpeg/trunk
-rw-r--r--libavcodec/faxcompr.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/libavcodec/faxcompr.c b/libavcodec/faxcompr.c
index 72ad8b95da..424de599b5 100644
--- a/libavcodec/faxcompr.c
+++ b/libavcodec/faxcompr.c
@@ -217,7 +217,7 @@ static int decode_group3_2d_line(AVCodecContext *avctx, GetBitContext *gb,
else
run_off -= *--ref;
offs += run;
- if(offs > width){
+ if(offs > width || run > width){
av_log(avctx, AV_LOG_ERROR, "Run went out of bounds\n");
return -1;
}