From 13dbd9b705f016926e25261064463968c78ca93d Mon Sep 17 00:00:00 2001
From: Peter Ross <pross@xvid.org>
Date: Thu, 7 Aug 2008 08:16:42 +0000
Subject: Prevent DAUD PCM encoder from fetching values outside of ff_reverse[]
 array bounds when input sample values are < 0.

Originally committed as revision 14658 to svn://svn.ffmpeg.org/ffmpeg/trunk
---
 libavcodec/pcm.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libavcodec/pcm.c b/libavcodec/pcm.c
index d8b013bcb0..3b61518509 100644
--- a/libavcodec/pcm.c
+++ b/libavcodec/pcm.c
@@ -209,7 +209,7 @@ static int pcm_encode_frame(AVCodecContext *avctx,
         break;
     case CODEC_ID_PCM_S24DAUD:
         for(;n>0;n--) {
-            uint32_t tmp = ff_reverse[*samples >> 8] +
+            uint32_t tmp = ff_reverse[(*samples >> 8) & 0xff] +
                            (ff_reverse[*samples & 0xff] << 8);
             tmp <<= 4; // sync flags would go here
             bytestream_put_be24(&dst, tmp);
-- 
cgit v1.2.3