aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLaurent Aimar <fenrir@videolan.org>2011-10-01 00:45:04 +0200
committerJustin Ruggles <justin.ruggles@gmail.com>2011-10-03 21:34:19 -0400
commit5a19acb17ceb71657b0eec51dac651953520e5c8 (patch)
tree7b5dd3549443e20f84b24234462a24b9b80920e8
parent291d74a46d32183653db07818c7b3407fd50a288 (diff)
downloadffmpeg-5a19acb17ceb71657b0eec51dac651953520e5c8.tar.gz
Fix out of bound reads in the QDM2 decoder.
Signed-off-by: Michael Niedermayer <michaelni@gmx.at> Signed-off-by: Justin Ruggles <justin.ruggles@gmail.com>
-rw-r--r--libavcodec/qdm2.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/libavcodec/qdm2.c b/libavcodec/qdm2.c
index 4c7f881e2b..b68197de17 100644
--- a/libavcodec/qdm2.c
+++ b/libavcodec/qdm2.c
@@ -1355,6 +1355,8 @@ static void qdm2_fft_decode_tones (QDM2Context *q, int duration, GetBitContext *
return;
local_int_14 = (offset >> local_int_8);
+ if (local_int_14 >= FF_ARRAY_ELEMS(fft_level_index_table))
+ return;
if (q->nb_channels > 1) {
channel = get_bits1(gb);