[FFmpeg-cvslog] mmvideo/mm_decode_intra: check horizontal coordinate too

[Michael Niedermayer]

ffmpeg | branch: release/1.0 | Michael Niedermayer <michaelni at gmx.at> | Thu May  2 22:06:03 2013 +0200| [1d285db8a3a85fb5eadd28640eb121684d7f6463] | committer: Michael Niedermayer

mmvideo/mm_decode_intra: check horizontal coordinate too

Signed-off-by: Michael Niedermayer <michaelni at gmx.at>
(cherry picked from commit ae2132ac90f02330b0988e6e26ee0d53e41cd196)

Signed-off-by: Michael Niedermayer <michaelni at gmx.at>

> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=1d285db8a3a85fb5eadd28640eb121684d7f6463
---

 libavcodec/mmvideo.c |    3 +++
 1 file changed, 3 insertions(+)

diff --git a/libavcodec/mmvideo.c b/libavcodec/mmvideo.c
index aebfe26..40892a7 100644
--- a/libavcodec/mmvideo.c
+++ b/libavcodec/mmvideo.c
@@ -104,6 +104,9 @@ static int mm_decode_intra(MmContext * s, int half_horiz, int half_vert)
         if (half_horiz)
             run_length *=2;
 
+        if (run_length > s->avctx->width - x)
+            return AVERROR_INVALIDDATA;
+
         if (color) {
             memset(s->frame.data[0] + y*s->frame.linesize[0] + x, color, run_length);
             if (half_vert)