[FFmpeg-cvslog] 8svx: check packet size before reading the initial sample value.

Justin Ruggles git at videolan.org
Fri Sep 23 00:37:50 CEST 2011


ffmpeg | branch: master | Justin Ruggles <justin.ruggles at gmail.com> | Tue Sep  6 18:43:55 2011 -0400| [0ac3b8fc4aeb1755717f44482f3236134a5b8405] | committer: Justin Ruggles

8svx: check packet size before reading the initial sample value.

> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=0ac3b8fc4aeb1755717f44482f3236134a5b8405
---

 libavcodec/8svx.c |    4 ++++
 1 files changed, 4 insertions(+), 0 deletions(-)

diff --git a/libavcodec/8svx.c b/libavcodec/8svx.c
index adface2..0f53d39 100644
--- a/libavcodec/8svx.c
+++ b/libavcodec/8svx.c
@@ -74,6 +74,10 @@ static int eightsvx_decode_frame(AVCodecContext *avctx, void *data, int *data_si
     int consumed = buf_size;
 
     if(avctx->frame_number == 0) {
+        if (buf_size < 2) {
+            av_log(avctx, AV_LOG_ERROR, "packet size is too small\n");
+            return AVERROR(EINVAL);
+        }
         esc->fib_acc = (int8_t)buf[1] + 128;
         buf_size -= 2;
         buf += 2;



More information about the ffmpeg-cvslog mailing list