From 810a8ba5b67389e808ed2f124e1cd54b8a26e679 Mon Sep 17 00:00:00 2001 From: Paul B Mahol Date: Wed, 18 May 2016 12:46:43 +0200 Subject: [PATCH] avcodec/iff: add forgotten checks for end of input buffer Signed-off-by: Paul B Mahol --- libavcodec/iff.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/libavcodec/iff.c b/libavcodec/iff.c index 5b819c8daa..dc3cb4b80f 100644 --- a/libavcodec/iff.c +++ b/libavcodec/iff.c @@ -1247,7 +1247,7 @@ static void decode_delta_d(uint8_t *dst, bytestream2_init(&gb, buf + ofssrc, buf_end - (buf + ofssrc)); entries = bytestream2_get_be32(&gb); - while (entries) { + while (entries && bytestream2_get_bytes_left(&gb) >= 8) { int32_t opcode = bytestream2_get_be32(&gb); unsigned offset = bytestream2_get_be32(&gb); @@ -1302,7 +1302,7 @@ static void decode_delta_e(uint8_t *dst, bytestream2_init(&gb, buf + ofssrc, buf_end - (buf + ofssrc)); entries = bytestream2_get_be16(&gb); - while (entries) { + while (entries && bytestream2_get_bytes_left(&gb) >= 6) { int16_t opcode = bytestream2_get_be16(&gb); unsigned offset = bytestream2_get_be32(&gb);