You've already forked FFmpeg
mirror of
https://github.com/FFmpeg/FFmpeg.git
synced 2025-07-06 06:27:36 +02:00
avcodec/mjpegdec: Add some sanity checks to ljpeg_decode_rgb_scan()
These prevent the rgb ljpeg code from being run on parameters that it doesnt support. No testcase available but it seems possible to trigger these. Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
@ -794,6 +794,12 @@ static int ljpeg_decode_rgb_scan(MJpegDecodeContext *s, int nb_components, int p
|
|||||||
int resync_mb_y = 0;
|
int resync_mb_y = 0;
|
||||||
int resync_mb_x = 0;
|
int resync_mb_x = 0;
|
||||||
|
|
||||||
|
if (s->nb_components != 3 && s->nb_components != 4)
|
||||||
|
return AVERROR_INVALIDDATA;
|
||||||
|
if (s->v_max != 1 || s->h_max != 1 || !s->lossless)
|
||||||
|
return AVERROR_INVALIDDATA;
|
||||||
|
|
||||||
|
|
||||||
s->restart_count = s->restart_interval;
|
s->restart_count = s->restart_interval;
|
||||||
|
|
||||||
av_fast_malloc(&s->ljpeg_buffer, &s->ljpeg_buffer_size,
|
av_fast_malloc(&s->ljpeg_buffer, &s->ljpeg_buffer_size,
|
||||||
|
Reference in New Issue
Block a user