diff options
| author | Vitor Sessak <vitor1001@gmail.com> | 2008-08-06 03:00:15 +0000 |
|---|---|---|
| committer | Vitor Sessak <vitor1001@gmail.com> | 2008-08-06 03:00:15 +0000 |
| commit | 8089c652a79092449d3e63848f9f8ed52c8e8666 (patch) | |
| tree | d73a85494ef1abb113201fb732429d26f4dcd1fd | |
| parent | 599170463456d6c706da00c78548a76e4150b67a (diff) | |
| download | ffmpeg-8089c652a79092449d3e63848f9f8ed52c8e8666.tar.gz | |
Check *data_size in decode_frame()
Originally committed as revision 14636 to svn://svn.ffmpeg.org/ffmpeg/trunk
| -rw-r--r-- | libavcodec/ra288.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/libavcodec/ra288.c b/libavcodec/ra288.c index f6476c1d1f..353ae529a6 100644 --- a/libavcodec/ra288.c +++ b/libavcodec/ra288.c @@ -236,6 +236,9 @@ static int ra288_decode_frame(AVCodecContext * avctx, void *data, return 0; } + if (*data_size < 32*5*2) + return -1; + init_get_bits(&gb, buf, avctx->block_align * 8); for (i=0; i < 32; i++) { |