diff options
| author | Ronald S. Bultje <rsbultje@gmail.com> | 2012-03-29 10:25:04 -0700 |
|---|---|---|
| committer | Ronald S. Bultje <rsbultje@gmail.com> | 2012-03-29 11:36:14 -0700 |
| commit | b7b1509d06d3696d3b944791227fe198ded0654b (patch) | |
| tree | 21f83a3ea77cd0626af571137117172a7207fe57 /libavcodec/dsicinav.c | |
| parent | bf39d3b59d85e5734babe48b61b8d92d18188185 (diff) | |
| download | ffmpeg-b7b1509d06d3696d3b944791227fe198ded0654b.tar.gz | |
truemotion: forbid invalid VLC bitsizes and token values.
SHOW_UBITS() is only defined up to n_bits is 25, therefore forbid
values larger than this in get_vlc2() (max_bits). tokens[][] can be
used as an index in deltas[], which has a size of 64, so ensure the
values are smaller than that.
This prevents crashes on corrupt bitstreams.
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
Diffstat (limited to 'libavcodec/dsicinav.c')
0 files changed, 0 insertions, 0 deletions