diff --git a/libavcodec/tmv.c b/libavcodec/tmv.c index 7bca0868c6..5f746d5fb3 100644 --- a/libavcodec/tmv.c +++ b/libavcodec/tmv.c @@ -52,6 +52,13 @@ static int tmv_decode_frame(AVCodecContext *avctx, void *data, return -1; } + if (avpkt->size < 2*char_rows*char_cols) { + av_log(avctx, AV_LOG_ERROR, + "Input buffer too small, truncated sample?\n"); + *data_size = 0; + return -1; + } + tmv->pic.pict_type = FF_I_TYPE; tmv->pic.key_frame = 1; dst = tmv->pic.data[0];