You've already forked FFmpeg
mirror of
https://github.com/FFmpeg/FFmpeg.git
synced 2025-08-15 14:13:16 +02:00
ffv1dec: more completely check slice count
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
@@ -469,9 +469,10 @@ static int read_extra_header(FFV1Context *f)
|
|||||||
f->num_h_slices = 1 + get_symbol(c, state, 0);
|
f->num_h_slices = 1 + get_symbol(c, state, 0);
|
||||||
f->num_v_slices = 1 + get_symbol(c, state, 0);
|
f->num_v_slices = 1 + get_symbol(c, state, 0);
|
||||||
|
|
||||||
if (f->num_h_slices > (unsigned)f->width ||
|
if (f->num_h_slices > (unsigned)f->width || !f->num_h_slices ||
|
||||||
f->num_v_slices > (unsigned)f->height) {
|
f->num_v_slices > (unsigned)f->height || !f->num_v_slices
|
||||||
av_log(f->avctx, AV_LOG_ERROR, "too many slices\n");
|
) {
|
||||||
|
av_log(f->avctx, AV_LOG_ERROR, "slice count invalid\n");
|
||||||
return AVERROR_INVALIDDATA;
|
return AVERROR_INVALIDDATA;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user