From f4e31985da4ba620bb32347c0ef30de71727116c Mon Sep 17 00:00:00 2001
From: Kostya Shishkov <kostya.shishkov@gmail.com>
Date: Mon, 6 Nov 2006 06:13:29 +0000
Subject: Check for symbol count

Originally committed as revision 6910 to svn://svn.ffmpeg.org/ffmpeg/trunk
---
 libavcodec/fraps.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/libavcodec/fraps.c b/libavcodec/fraps.c
index aff656688c..18d2700492 100644
--- a/libavcodec/fraps.c
+++ b/libavcodec/fraps.c
@@ -140,6 +140,10 @@ static int fraps2_decode_plane(FrapsContext *s, uint8_t *dst, int stride, int w,
         s->nodes[i].sym = i;
         s->nodes[i].count = LE_32(src);
         s->nodes[i].n0 = -2;
+        if(s->nodes[i].count < 0) {
+            av_log(s->avctx, AV_LOG_ERROR, "Symbol count < 0\n");
+            return -1;
+        }
         src += 4;
         sum += s->nodes[i].count;
     }
-- 
cgit v1.2.3