diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2020-04-21 00:03:39 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2020-05-19 17:17:36 +0200 |
| commit | 22fba2adee0b2fd0cf88a47a1c89535a54abd1b9 (patch) | |
| tree | 5f54095a1b2b47e6f4e84116ac8e875c64dcb4b2 | |
| parent | 0078687445b61d66182ed59573932f4ee721cbb0 (diff) | |
| download | ffmpeg-22fba2adee0b2fd0cf88a47a1c89535a54abd1b9.tar.gz | |
avcodec/iff: Fix invalid pointer intermediates in decode_deep_rle32()
Reviewed-by: Peter Ross <pross@xvid.org>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit bc41a29a5aa3c3dedba0a85b4aeb79a07eeeb1b4)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
| -rw-r--r-- | libavcodec/iff.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libavcodec/iff.c b/libavcodec/iff.c index cee0c2261a..ffd2c6e928 100644 --- a/libavcodec/iff.c +++ b/libavcodec/iff.c @@ -715,7 +715,7 @@ static void decode_deep_rle32(uint8_t *dst, const uint8_t *src, int src_size, in { const uint8_t *src_end = src + src_size; int x = 0, y = 0, i; - while (src + 5 <= src_end) { + while (src_end - src >= 5) { int opcode; opcode = *(int8_t *)src++; if (opcode >= 0) { |