diff options
| author | Martin Storsjö <martin@martin.st> | 2013-09-12 12:27:58 +0300 |
|---|---|---|
| committer | Martin Storsjö <martin@martin.st> | 2013-09-16 11:04:52 +0300 |
| commit | 6fc8226e29055858f28973bb3d27b63b3b65e616 (patch) | |
| tree | cb78370ed8780c5c767209f0004ab42d34fe4f8e /libavcodec/vp3.c | |
| parent | ac9d159015a88aa2721b271875d18482f713f354 (diff) | |
vp3: Check the framerate for validity
Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
Signed-off-by: Martin Storsjö <martin@martin.st>
Diffstat (limited to 'libavcodec/vp3.c')
| -rw-r--r-- | libavcodec/vp3.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/libavcodec/vp3.c b/libavcodec/vp3.c index 0211537eb5..a269dc3320 100644 --- a/libavcodec/vp3.c +++ b/libavcodec/vp3.c @@ -2199,6 +2199,10 @@ static int theora_decode_header(AVCodecContext *avctx, GetBitContext *gb) fps.num = get_bits_long(gb, 32); fps.den = get_bits_long(gb, 32); if (fps.num && fps.den) { + if (fps.num < 0 || fps.den < 0) { + av_log(avctx, AV_LOG_ERROR, "Invalid framerate\n"); + return AVERROR_INVALIDDATA; + } av_reduce(&avctx->time_base.num, &avctx->time_base.den, fps.den, fps.num, 1<<30); } |