[FFmpeg-cvslog] rawdec: Check w/h.
Michael Niedermayer
git at videolan.org
Fri Mar 23 11:25:49 CET 2012
ffmpeg | branch: master | Michael Niedermayer <michaelni at gmx.at> | Fri Mar 23 10:48:18 2012 +0100| [a22e64fd02133867406604cb6589bb31696f08bc] | committer: Michael Niedermayer
rawdec: Check w/h.
Fixes FPE
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni at gmx.at>
> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=a22e64fd02133867406604cb6589bb31696f08bc
---
libavcodec/rawdec.c | 5 +++++
1 files changed, 5 insertions(+), 0 deletions(-)
diff --git a/libavcodec/rawdec.c b/libavcodec/rawdec.c
index 8b8e9d6..b592243 100644
--- a/libavcodec/rawdec.c
+++ b/libavcodec/rawdec.c
@@ -158,6 +158,11 @@ static int raw_decode(AVCodecContext *avctx,
if(buf_size < context->length - (avctx->pix_fmt==PIX_FMT_PAL8 ? 256*4 : 0))
return -1;
+ if (avctx->width <= 0 || avctx->height <= 0) {
+ av_log(avctx, AV_LOG_ERROR, "w/h is invalid\n");
+ return AVERROR(EINVAL);
+ }
+
//2bpp and 4bpp raw in avi and mov (yes this is ugly ...)
if (context->buffer) {
int i;
More information about the ffmpeg-cvslog
mailing list