diff options
author | Michael Niedermayer <michaelni@gmx.at> | 2011-08-10 17:29:51 +0200 |
---|---|---|
committer | Michael Niedermayer <michaelni@gmx.at> | 2011-08-10 17:29:51 +0200 |
commit | 9f06c1c61e876e930753da200bfe835817e30a53 (patch) | |
tree | b294f6f585d9f59d62f5f7c6a44af4f14af67ee0 /libavcodec/cavsdec.c | |
parent | a9aa88df1d8bdef7a3ba520e285c6c5b639d5fd5 (diff) | |
download | ffmpeg-9f06c1c61e876e930753da200bfe835817e30a53.tar.gz |
cavsdec: avoid possible crash with crafted input
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
Diffstat (limited to 'libavcodec/cavsdec.c')
-rw-r--r-- | libavcodec/cavsdec.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/libavcodec/cavsdec.c b/libavcodec/cavsdec.c index acf040788c..7beedb81b7 100644 --- a/libavcodec/cavsdec.c +++ b/libavcodec/cavsdec.c @@ -164,7 +164,7 @@ static inline int decode_residual_inter(AVSContext *h) { /* get coded block pattern */ int cbp= get_ue_golomb(&h->s.gb); - if(cbp > 63){ + if(cbp > 63U){ av_log(h->s.avctx, AV_LOG_ERROR, "illegal inter cbp\n"); return -1; } @@ -223,7 +223,7 @@ static int decode_mb_i(AVSContext *h, int cbp_code) { /* get coded block pattern */ if(h->pic_type == AV_PICTURE_TYPE_I) cbp_code = get_ue_golomb(gb); - if(cbp_code > 63){ + if(cbp_code > 63U){ av_log(h->s.avctx, AV_LOG_ERROR, "illegal intra cbp\n"); return -1; } |