mirror of
https://github.com/FFmpeg/FFmpeg.git
synced 2024-11-21 10:55:51 +02:00
Check avctx width/height more thoroughly (e.g. all values 0 except width would
have been accepted before). Also do not fail if they are invalid but instead override them to 0. This allows decoding e.g. MPEG video when only the container values are corrupted. For encoding a value of 0,0 of course makes no sense, but was allowed through before and will be caught by an extra check in the encode function. Originally committed as revision 25124 to svn://svn.ffmpeg.org/ffmpeg/trunk
This commit is contained in:
parent
4faf628f20
commit
82eac2f321
@ -485,10 +485,15 @@ int attribute_align_arg avcodec_open(AVCodecContext *avctx, AVCodec *codec)
|
||||
else if(avctx->width && avctx->height)
|
||||
avcodec_set_dimensions(avctx, avctx->width, avctx->height);
|
||||
|
||||
if ((avctx->coded_width || avctx->coded_height || avctx->width || avctx->height)
|
||||
&& ( av_image_check_size(avctx->coded_width, avctx->coded_height, 0, avctx) < 0
|
||||
|| av_image_check_size(avctx->width, avctx->height, 0, avctx) < 0)) {
|
||||
av_log(avctx, AV_LOG_WARNING, "ignoring invalid width/height values\n");
|
||||
avcodec_set_dimensions(avctx, 0, 0);
|
||||
}
|
||||
|
||||
#define SANE_NB_CHANNELS 128U
|
||||
if (((avctx->coded_width || avctx->coded_height)
|
||||
&& av_image_check_size(avctx->coded_width, avctx->coded_height, 0, avctx))
|
||||
|| avctx->channels > SANE_NB_CHANNELS) {
|
||||
if (avctx->channels > SANE_NB_CHANNELS) {
|
||||
ret = AVERROR(EINVAL);
|
||||
goto free_and_end;
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user