aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPaul B Mahol <onemda@gmail.com>2015-09-01 15:53:56 +0000
committerPaul B Mahol <onemda@gmail.com>2015-09-03 09:12:14 +0000
commit81f7a2579b08cba98eaf6a5b3bf73d0ec15b5af3 (patch)
tree89e0f41bc1775edc5b4a52883bf2e8a3d504f70c
parent7820197d2cd66391a1d9f1a2497553090384c4ac (diff)
downloadffmpeg-81f7a2579b08cba98eaf6a5b3bf73d0ec15b5af3.tar.gz
avcodec/vorbisdec: use init_get_bits8()
Signed-off-by: Paul B Mahol <onemda@gmail.com>
-rw-r--r--libavcodec/vorbisdec.c11
1 files changed, 8 insertions, 3 deletions
diff --git a/libavcodec/vorbisdec.c b/libavcodec/vorbisdec.c
index a531a6467c..f773afaa41 100644
--- a/libavcodec/vorbisdec.c
+++ b/libavcodec/vorbisdec.c
@@ -1739,7 +1739,9 @@ static int vorbis_decode_frame(AVCodecContext *avctx, void *data,
ff_dlog(NULL, "packet length %d \n", buf_size);
if (*buf == 1 && buf_size > 7) {
- init_get_bits(gb, buf+1, buf_size*8 - 8);
+ if ((ret = init_get_bits8(gb, buf + 1, buf_size - 1)) < 0)
+ return ret;
+
vorbis_free(vc);
if ((ret = vorbis_parse_id_hdr(vc))) {
av_log(avctx, AV_LOG_ERROR, "Id header corrupt.\n");
@@ -1763,7 +1765,9 @@ static int vorbis_decode_frame(AVCodecContext *avctx, void *data,
}
if (*buf == 5 && buf_size > 7 && vc->channel_residues && !vc->modes) {
- init_get_bits(gb, buf+1, buf_size*8 - 8);
+ if ((ret = init_get_bits8(gb, buf + 1, buf_size - 1)) < 0)
+ return ret;
+
if ((ret = vorbis_parse_setup_hdr(vc))) {
av_log(avctx, AV_LOG_ERROR, "Setup header corrupt.\n");
vorbis_free(vc);
@@ -1792,7 +1796,8 @@ static int vorbis_decode_frame(AVCodecContext *avctx, void *data,
}
}
- init_get_bits(gb, buf, buf_size*8);
+ if ((ret = init_get_bits8(gb, buf, buf_size)) < 0)
+ return ret;
if ((len = vorbis_parse_audio_packet(vc, channel_ptrs)) <= 0)
return len;