mirror of
https://github.com/FFmpeg/FFmpeg.git
synced 2024-11-26 19:01:44 +02:00
avcodec/scpr: error out if run length is <= 0
This commit is contained in:
parent
b205635fbc
commit
d71dfc087b
@ -334,6 +334,8 @@ static int decompress_i(AVCodecContext *avctx, uint32_t *dst, int linesize)
|
||||
ret = decode_value(s, s->run_model[0], 256, 400, &run);
|
||||
if (ret < 0)
|
||||
return ret;
|
||||
if (run <= 0)
|
||||
return AVERROR_INVALIDDATA;
|
||||
|
||||
clr = (b << 16) + (g << 8) + r;
|
||||
k += run;
|
||||
@ -382,6 +384,8 @@ static int decompress_i(AVCodecContext *avctx, uint32_t *dst, int linesize)
|
||||
ret = decode_value(s, s->run_model[ptype], 256, 400, &run);
|
||||
if (ret < 0)
|
||||
return ret;
|
||||
if (run <= 0)
|
||||
return AVERROR_INVALIDDATA;
|
||||
|
||||
switch (ptype) {
|
||||
case 0:
|
||||
@ -615,6 +619,8 @@ static int decompress_p(AVCodecContext *avctx,
|
||||
ret = decode_value(s, s->run_model[ptype], 256, 400, &run);
|
||||
if (ret < 0)
|
||||
return ret;
|
||||
if (run <= 0)
|
||||
return AVERROR_INVALIDDATA;
|
||||
|
||||
switch (ptype) {
|
||||
case 0:
|
||||
|
Loading…
Reference in New Issue
Block a user