diff options
author | Ronald S. Bultje <rsbultje@gmail.com> | 2012-02-21 10:36:27 -0800 |
---|---|---|
committer | Reinhard Tartler <siretart@tauware.de> | 2012-02-26 10:03:16 +0100 |
commit | 0312969b9ea7fa7027bca665bfded88690c4caa0 (patch) | |
tree | b7d26394037951fa4342ed8bd5ef7959bace307f /libavformat/gopher.c | |
parent | 62beae313a4f91e8ff4e8dc0b2ec78baaa804b32 (diff) | |
download | ffmpeg-0312969b9ea7fa7027bca665bfded88690c4caa0.tar.gz |
rmdec: when using INT4 deinterleaving, error out if sub_packet_h <= 1.
We read sub_packet_h / 2 packets per line of data (during deinterleaving),
which equals zero if sub_packet_h <= 1, thus causing us to not read any
data, leading to an infinite loop.
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
(cherry picked from commit e30b3e59a4f3004337cb1623b2aac988ce52b93f)
Signed-off-by: Anton Khirnov <anton@khirnov.net>
Diffstat (limited to 'libavformat/gopher.c')
0 files changed, 0 insertions, 0 deletions