Browse Source

Fix extreme stupidity: buffer size check must of course be before buffer use!

Originally committed as revision 10443 to svn://svn.ffmpeg.org/ffmpeg/trunk
tags/v0.5
Reimar Döffinger 17 years ago
parent
commit
6cf7e81f8c
1 changed files with 2 additions and 2 deletions
  1. +2
    -2
      libavcodec/nuv.c

+ 2
- 2
libavcodec/nuv.c View File

@@ -156,12 +156,12 @@ static int decode_frame(AVCodecContext *avctx, void *data, int *data_size,
buf_size = c->decomp_size;
}
if (c->codec_frameheader) {
get_quant_quality(c, buf[10]);
rtjpeg_decode_init(&c->rtj, &c->dsp, c->width, c->height, c->lq, c->cq);
if (buf_size < 12) {
av_log(avctx, AV_LOG_ERROR, "invalid nuv video frame\n");
return -1;
}
get_quant_quality(c, buf[10]);
rtjpeg_decode_init(&c->rtj, &c->dsp, c->width, c->height, c->lq, c->cq);
buf = &buf[12];
buf_size -= 12;
}


Loading…
Cancel
Save