mirror of
https://github.com/FFmpeg/FFmpeg.git
synced 2024-12-23 12:43:46 +02:00
rv20: prevent calling ff_h263_decode_mba() with unset height/width
Prevents a crash of VLC during playback of a invalid matroska file, found by John Villamil <johnv@matasano.com>. CC: libav-stable@libav.org
This commit is contained in:
parent
4e81b5f517
commit
c3e10ae412
@ -362,7 +362,8 @@ static int rv20_decode_picture_header(MpegEncContext *s)
|
|||||||
if(s->avctx->debug & FF_DEBUG_PICT_INFO){
|
if(s->avctx->debug & FF_DEBUG_PICT_INFO){
|
||||||
av_log(s->avctx, AV_LOG_DEBUG, "F %d/%d\n", f, rpr_bits);
|
av_log(s->avctx, AV_LOG_DEBUG, "F %d/%d\n", f, rpr_bits);
|
||||||
}
|
}
|
||||||
}
|
} else if (av_image_check_size(s->width, s->height, 0, s->avctx) < 0)
|
||||||
|
return AVERROR_INVALIDDATA;
|
||||||
|
|
||||||
mb_pos = ff_h263_decode_mba(s);
|
mb_pos = ff_h263_decode_mba(s);
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user