summaryrefslogtreecommitdiff
path: root/libavcodec/rasc.c
diff options
context:
space:
mode:
Diffstat (limited to 'libavcodec/rasc.c')
-rw-r--r--libavcodec/rasc.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/libavcodec/rasc.c b/libavcodec/rasc.c
index 67351dfd19..1b607ac31e 100644
--- a/libavcodec/rasc.c
+++ b/libavcodec/rasc.c
@@ -215,7 +215,7 @@ static int decode_move(AVCodecContext *avctx,
bytestream2_skip(gb, 8);
compression = bytestream2_get_le32(gb);
- if (nb_moves > INT32_MAX / 16)
+ if (nb_moves > INT32_MAX / 16 || nb_moves > avctx->width * avctx->height)
return AVERROR_INVALIDDATA;
uncompressed_size = 16 * nb_moves;