summaryrefslogtreecommitdiff
path: root/libavcodec/exr.c
diff options
context:
space:
mode:
Diffstat (limited to 'libavcodec/exr.c')
-rw-r--r--libavcodec/exr.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/libavcodec/exr.c b/libavcodec/exr.c
index e7387ffd66..f7d59c8241 100644
--- a/libavcodec/exr.c
+++ b/libavcodec/exr.c
@@ -1299,6 +1299,9 @@ static int decode_block(AVCodecContext *avctx, void *tdata,
axmax = FFMAX(0, (avctx->width - (s->xmax + 1))) * step;
}
+ if (avctx->max_pixels && uncompressed_size > avctx->max_pixels * 16LL)
+ return AVERROR_INVALIDDATA;
+
if (data_size < uncompressed_size || s->is_tile) { /* td->tmp is use for tile reorganization */
av_fast_padded_malloc(&td->tmp, &td->tmp_size, uncompressed_size);
if (!td->tmp)