Browse Source

fix infinite loop (suggested change by rjayne at convera dot com)

fixes bug #1160195

Originally committed as revision 4434 to svn://svn.ffmpeg.org/ffmpeg/trunk
tags/v0.5
Michael Niedermayer 20 years ago
parent
commit
472ea1284e
1 changed files with 3 additions and 0 deletions
  1. +3
    -0
      libavcodec/cinepak.c

+ 3
- 0
libavcodec/cinepak.c View File

@@ -274,6 +274,9 @@ static int cinepak_decode_strip (CinepakContext *s,
while ((data + 4) <= eod) {
chunk_id = BE_16 (&data[0]);
chunk_size = BE_16 (&data[2]) - 4;
if(chunk_size < 0)
return -1;

data += 4;
chunk_size = ((data + chunk_size) > eod) ? (eod - data) : chunk_size;



Loading…
Cancel
Save