[FFmpeg-devel] [PATCH] Decode PGS subtitle multipacket RLE data

[Reimar Döffinger]

On Sat, Nov 06, 2010 at 02:32:33PM -0700, Mark Goodman wrote:
> The width and height bytes are included in the encoded length so
> subtract four bytes from the encoded length.

There is not enough validation.
The decoder is already really crappy in that regard, but the code
really needs to check that it has all necessary data upon display
(or whenever else it uses it) and at the very least print an error
message if not.