diff options
author | Andreas Cadhalpun <[email protected]> | 2016-11-13 18:22:12 +0100 |
---|---|---|
committer | Andreas Cadhalpun <[email protected]> | 2016-11-27 00:28:06 +0100 |
commit | 52d8c1e474c3e11fed06cf17e22c1e59406a0ce3 (patch) | |
tree | 705a0cf2c30fb062f2564a8533801f31a75dbfde | |
parent | a5ba9eab44da13bb0683193e2382f1bfd853a47e (diff) |
filmstripdec: correctly check image dimensions
This prevents a division by zero in read_packet.
Reviewed-by: Paul B Mahol <[email protected]>
Signed-off-by: Andreas Cadhalpun <[email protected]>
(cherry picked from commit 25012c56448a48487cdc9699465e640871dbcd60)
Signed-off-by: Andreas Cadhalpun <[email protected]>
-rw-r--r-- | libavformat/filmstripdec.c | 7 |
1 files changed, 3 insertions, 4 deletions
diff --git a/libavformat/filmstripdec.c b/libavformat/filmstripdec.c index 414e276bfe..0aeb5947b0 100644 --- a/libavformat/filmstripdec.c +++ b/libavformat/filmstripdec.c @@ -25,6 +25,7 @@ */ #include "libavutil/intreadwrite.h" +#include "libavutil/imgutils.h" #include "avformat.h" #include "internal.h" @@ -68,10 +69,8 @@ static int read_header(AVFormatContext *s) st->codecpar->height = avio_rb16(pb); film->leading = avio_rb16(pb); - if (st->codecpar->width * 4LL * st->codecpar->height >= INT_MAX) { - av_log(s, AV_LOG_ERROR, "dimensions too large\n"); - return AVERROR_PATCHWELCOME; - } + if (av_image_check_size(st->codecpar->width, st->codecpar->height, 0, s) < 0) + return AVERROR_INVALIDDATA; avpriv_set_pts_info(st, 64, 1, avio_rb16(pb)); |