From 8089c652a79092449d3e63848f9f8ed52c8e8666 Mon Sep 17 00:00:00 2001 From: Vitor Sessak Date: Wed, 6 Aug 2008 03:00:15 +0000 Subject: [PATCH] Check *data_size in decode_frame() Originally committed as revision 14636 to svn://svn.ffmpeg.org/ffmpeg/trunk --- libavcodec/ra288.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/libavcodec/ra288.c b/libavcodec/ra288.c index f6476c1d1f..353ae529a6 100644 --- a/libavcodec/ra288.c +++ b/libavcodec/ra288.c @@ -236,6 +236,9 @@ static int ra288_decode_frame(AVCodecContext * avctx, void *data, return 0; } + if (*data_size < 32*5*2) + return -1; + init_get_bits(&gb, buf, avctx->block_align * 8); for (i=0; i < 32; i++) {