diff options
| author | Michael Niedermayer <michaelni@gmx.at> | 2013-07-21 16:34:14 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michaelni@gmx.at> | 2013-07-21 17:57:15 +0200 |
| commit | 80c873a87ed07c6dd772dcf6befb4cf0fd98ef7b (patch) | |
| tree | 788d234f65b564eb557464b00577237ea3189c8f /libavcodec/h264_sei.c | |
| parent | 800ffa1fc0896bd0b470725545b191fea802b42d (diff) | |
| download | ffmpeg-80c873a87ed07c6dd772dcf6befb4cf0fd98ef7b.tar.gz | |
avcodec/ff_h264_decode_sei: fix integer overflow with size.
This issue is hypothetical and no testcase is available.
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
Diffstat (limited to 'libavcodec/h264_sei.c')
| -rw-r--r-- | libavcodec/h264_sei.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/libavcodec/h264_sei.c b/libavcodec/h264_sei.c index 2ac9588945..30030805fe 100644 --- a/libavcodec/h264_sei.c +++ b/libavcodec/h264_sei.c @@ -244,7 +244,8 @@ static int decode_frame_packing(H264Context *h, int size){ int ff_h264_decode_sei(H264Context *h){ while (get_bits_left(&h->gb) > 16) { - int size, type; + int type; + unsigned size; type=0; do{ |