diff options
| author | Michael Niedermayer <michaelni@gmx.at> | 2014-01-31 19:16:02 +0100 |
|---|---|---|
| committer | Michael Niedermayer <michaelni@gmx.at> | 2014-03-05 03:06:10 +0100 |
| commit | ca9d302519b690af1318c4c5ef6aeff118548819 (patch) | |
| tree | 71c3dbd24be8bc857be44bfa76be3440cd972b98 | |
| parent | e925fd215f9f44bb46c916310c93a20ee28ef245 (diff) | |
| download | ffmpeg-ca9d302519b690af1318c4c5ef6aeff118548819.tar.gz | |
avcodec/takdec: always check bits_per_raw_sample
Fixes out of array access
Fixes: asan_heap-oob_19c7a94_6470_cov_1453611734_luckynight-partial.tak
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit f58eab151214d2d35ff0973f2b3e51c5eb372da4)
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
| -rw-r--r-- | libavcodec/takdec.c | 8 |
1 files changed, 3 insertions, 5 deletions
diff --git a/libavcodec/takdec.c b/libavcodec/takdec.c index ae751fed16..260e32699e 100644 --- a/libavcodec/takdec.c +++ b/libavcodec/takdec.c @@ -732,11 +732,9 @@ static int tak_decode_frame(AVCodecContext *avctx, void *data, return AVERROR_INVALIDDATA; } - if (s->ti.bps != avctx->bits_per_raw_sample) { - avctx->bits_per_raw_sample = s->ti.bps; - if ((ret = set_bps_params(avctx)) < 0) - return ret; - } + avctx->bits_per_raw_sample = s->ti.bps; + if ((ret = set_bps_params(avctx)) < 0) + return ret; if (s->ti.sample_rate != avctx->sample_rate) { avctx->sample_rate = s->ti.sample_rate; set_sample_rate_params(avctx); |