1
0
mirror of https://github.com/FFmpeg/FFmpeg.git synced 2024-12-23 12:43:46 +02:00

Fix crash for files with strip size larger than the buffer.

Fixes issue 2498.

Patch by Daniel Kang, daniel.d.kang at gmail

Originally committed as revision 26243 to svn://svn.ffmpeg.org/ffmpeg/trunk
This commit is contained in:
Daniel Kang 2011-01-06 14:44:50 +00:00 committed by Carl Eugen Hoyos
parent 504530bfba
commit 1ba44140a3

View File

@ -531,6 +531,11 @@ static int decode_frame(AVCodecContext *avctx,
else else
ssize = s->stripsize; ssize = s->stripsize;
if (ssize > buf_size) {
av_log(avctx, AV_LOG_ERROR, "Buffer size is smaller than strip size\n");
return -1;
}
if(s->stripdata){ if(s->stripdata){
soff = tget(&s->stripdata, s->sot, s->le); soff = tget(&s->stripdata, s->sot, s->le);
}else }else