aboutsummaryrefslogtreecommitdiffstats
path: root/libavcodec
diff options
context:
space:
mode:
authorVitor Sessak <vitor1001@gmail.com>2008-08-06 03:00:15 +0000
committerVitor Sessak <vitor1001@gmail.com>2008-08-06 03:00:15 +0000
commit8089c652a79092449d3e63848f9f8ed52c8e8666 (patch)
treed73a85494ef1abb113201fb732429d26f4dcd1fd /libavcodec
parent599170463456d6c706da00c78548a76e4150b67a (diff)
downloadffmpeg-8089c652a79092449d3e63848f9f8ed52c8e8666.tar.gz
Check *data_size in decode_frame()
Originally committed as revision 14636 to svn://svn.ffmpeg.org/ffmpeg/trunk
Diffstat (limited to 'libavcodec')
-rw-r--r--libavcodec/ra288.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/libavcodec/ra288.c b/libavcodec/ra288.c
index f6476c1d1f..353ae529a6 100644
--- a/libavcodec/ra288.c
+++ b/libavcodec/ra288.c
@@ -236,6 +236,9 @@ static int ra288_decode_frame(AVCodecContext * avctx, void *data,
return 0;
}
+ if (*data_size < 32*5*2)
+ return -1;
+
init_get_bits(&gb, buf, avctx->block_align * 8);
for (i=0; i < 32; i++) {