[FFmpeg-cvslog] avcodec/cfhd: Make sure we have an end of header tag before allocating a frame.

[Kieran Kunhya]

ffmpeg | branch: master | Kieran Kunhya <kieran at kunhya.com> | Sun Jan 31 23:59:52 2016 +0000| [bdd8e02b72e79478eb1c4e04d9a8efa100900878] | committer: James Darnley

avcodec/cfhd: Make sure we have an end of header tag before allocating a frame.

Fixes tickets #5208 and #5209

> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=bdd8e02b72e79478eb1c4e04d9a8efa100900878
---

 libavcodec/cfhd.c |    9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/libavcodec/cfhd.c b/libavcodec/cfhd.c
index 115081c..410bb7b 100644
--- a/libavcodec/cfhd.c
+++ b/libavcodec/cfhd.c
@@ -224,7 +224,7 @@ static int cfhd_decode(AVCodecContext *avctx, void *data, int *got_frame,
     GetByteContext gb;
     ThreadFrame frame = { .f = data };
     AVFrame *pic = data;
-    int ret = 0, i, j, plane;
+    int ret = 0, i, j, plane, got_buffer = 0;
     int16_t *coeff_data;
 
     avctx->pix_fmt = AV_PIX_FMT_YUV422P10;
@@ -426,6 +426,7 @@ static int cfhd_decode(AVCodecContext *avctx, void *data, int *got_frame,
 
             s->coded_width = 0;
             s->coded_height = 0;
+            got_buffer = 1;
         }
         coeff_data = s->plane[s->channel_num].subband[s->subband_num_actual];
 
@@ -557,6 +558,12 @@ static int cfhd_decode(AVCodecContext *avctx, void *data, int *got_frame,
         goto end;
     }
 
+    if (!got_buffer) {
+        av_log(avctx, AV_LOG_ERROR, "No end of header tag found\n");
+        ret = AVERROR(EINVAL);
+        goto end;
+    }
+
     for (plane = 0; plane < 3 && !ret; plane++) {
         /* level 1 */
         int lowpass_height  = s->plane[plane].band[0][0].height;