mirror of
https://github.com/FFmpeg/FFmpeg.git
synced 2024-12-23 12:43:46 +02:00
flicvideo: fix overread.
Bug Found by: Diana Elena Muscalu Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
parent
944f5b2779
commit
afb2bac48d
@ -319,12 +319,14 @@ static int flic_decode_frame_8BPP(AVCodecContext *avctx,
|
||||
pixel_ptr = y_ptr;
|
||||
CHECK_PIXEL_PTR(0);
|
||||
pixel_countdown = s->avctx->width;
|
||||
line_packets = buf[stream_ptr++];
|
||||
if (stream_ptr + 2 * line_packets > stream_ptr_after_chunk)
|
||||
if (stream_ptr + 1 > stream_ptr_after_chunk)
|
||||
break;
|
||||
line_packets = buf[stream_ptr++];
|
||||
if (line_packets > 0) {
|
||||
for (i = 0; i < line_packets; i++) {
|
||||
/* account for the skip bytes */
|
||||
if (stream_ptr + 2 > stream_ptr_after_chunk)
|
||||
break;
|
||||
pixel_skip = buf[stream_ptr++];
|
||||
pixel_ptr += pixel_skip;
|
||||
pixel_countdown -= pixel_skip;
|
||||
|
Loading…
Reference in New Issue
Block a user