diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2017-04-27 15:10:26 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2017-05-16 16:00:22 +0200 |
| commit | 2cfd230759e71f322d136229a5351b69e92856a3 (patch) | |
| tree | 893324c7bf322e42d4b86e324a9d6d0a967ec232 | |
| parent | 44fd56337616261f4eab19ac8ba5f92daf2797c2 (diff) | |
| download | ffmpeg-2cfd230759e71f322d136229a5351b69e92856a3.tar.gz | |
avcodec/svq3: Reject dx/dy beyond 16bit
The code does use 16bit sized arrays later so larger deltas would not work
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 48b3117844177d8442bc9fa3ede1d31ce82ae6fc)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
| -rw-r--r-- | libavcodec/svq3.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libavcodec/svq3.c b/libavcodec/svq3.c index 3a754a639a..53f56df58d 100644 --- a/libavcodec/svq3.c +++ b/libavcodec/svq3.c @@ -538,7 +538,7 @@ static inline int svq3_mc_dir(SVQ3Context *s, int size, int mode, dy = get_interleaved_se_golomb(&s->gb_slice); dx = get_interleaved_se_golomb(&s->gb_slice); - if (dx == INVALID_VLC || dy == INVALID_VLC) { + if (dx != (int16_t)dx || dy != (int16_t)dy) { av_log(s->avctx, AV_LOG_ERROR, "invalid MV vlc\n"); return -1; } |