virtualenv/FFmpeg
1
0
Fork 0
mirror of https://github.com/FFmpeg/FFmpeg.git synced 2025-01-13 21:28:01 +02:00
Code Issues Releases Activity

smacker: add sanity check for length in smacker_decode_tree()

Browse Source 
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
Michael Niedermayer 2012-06-21 16:01:52 +02:00
parent 7681d0eaca
commit b829da3639
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
libavcodec/smacker.c
View File

@ -96,6 +96,10 @@ enum SmkBlockTypes {
*/ */
static int smacker_decode_tree(GetBitContext *gb, HuffContext *hc, uint32_t prefix, int length) static int smacker_decode_tree(GetBitContext *gb, HuffContext *hc, uint32_t prefix, int length)
{ {
if(length > 32) {
av_log(NULL, AV_LOG_ERROR, "length too long\n");
return -1;
}
if(!get_bits1(gb)){ //Leaf if(!get_bits1(gb)){ //Leaf
if(hc->current >= 256){ if(hc->current >= 256){
av_log(NULL, AV_LOG_ERROR, "Tree size exceeded!\n"); av_log(NULL, AV_LOG_ERROR, "Tree size exceeded!\n");