Luca Barbato
12 years ago
1 changed files with 2 additions and 2 deletions
Unified View
Diff Options
-
+2 -2libavcodec/8bps.c
+ 2
- 2
libavcodec/8bps.c
View File
| @@ -105,7 +105,7 @@ static int decode_frame(AVCodecContext *avctx, void *data, | |||||
| if ((count = *dp++) <= 127) { | if ((count = *dp++) <= 127) { | ||||
| count++; | count++; | ||||
| dlen -= count + 1; | dlen -= count + 1; | ||||
| if (pixptr + count * px_inc > pixptr_end) | |||||
| if (pixptr_end - pixptr < count * px_inc) | |||||
| break; | break; | ||||
| if (ep - dp < count) | if (ep - dp < count) | ||||
| return AVERROR_INVALIDDATA; | return AVERROR_INVALIDDATA; | ||||
| @@ -115,7 +115,7 @@ static int decode_frame(AVCodecContext *avctx, void *data, | |||||
| } | } | ||||
| } else { | } else { | ||||
| count = 257 - count; | count = 257 - count; | ||||
| if (pixptr + count * px_inc > pixptr_end) | |||||
| if (pixptr_end - pixptr < count * px_inc) | |||||
| break; | break; | ||||
| while (count--) { | while (count--) { | ||||
| *pixptr = *dp; | *pixptr = *dp; | ||||