diff options
author | Vitor Sessak <vitor1001@gmail.com> | 2008-08-06 05:06:10 +0000 |
---|---|---|
committer | Vitor Sessak <vitor1001@gmail.com> | 2008-08-06 05:06:10 +0000 |
commit | 438abdaaeb59d88cacddf4e8b567c3b2629f34f2 (patch) | |
tree | e633926ec97f4eb214adcda4492003f90e648ab3 /libavcodec/ra144.c | |
parent | 8089c652a79092449d3e63848f9f8ed52c8e8666 (diff) | |
download | ffmpeg-438abdaaeb59d88cacddf4e8b567c3b2629f34f2.tar.gz |
Check available size before writing in decode_frame()
Originally committed as revision 14637 to svn://svn.ffmpeg.org/ffmpeg/trunk
Diffstat (limited to 'libavcodec/ra144.c')
-rw-r--r-- | libavcodec/ra144.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/libavcodec/ra144.c b/libavcodec/ra144.c index fc99655e80..649dfac33e 100644 --- a/libavcodec/ra144.c +++ b/libavcodec/ra144.c @@ -315,6 +315,9 @@ static int ra144_decode_frame(AVCodecContext * avctx, void *vdata, RA144Context *ractx = avctx->priv_data; GetBitContext gb; + if (*data_size < 2*160) + return -1; + if(buf_size < 20) { av_log(avctx, AV_LOG_ERROR, "Frame too small (%d bytes). Truncated file?\n", buf_size); |