From 2867ed9b1c0561b0e50d9c4f73e09621333e2f1f Mon Sep 17 00:00:00 2001
From: Michael Niedermayer <michaelni@gmx.at>
Date: Mon, 19 Nov 2007 20:14:46 +0000
Subject: check region depth for validity (32/64/128 would crash at least due
 to 1<<depth allocation later, and no i do not have a sample file)

Originally committed as revision 11062 to svn://svn.ffmpeg.org/ffmpeg/trunk
---
 libavcodec/dvbsubdec.c | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'libavcodec/dvbsubdec.c')

diff --git a/libavcodec/dvbsubdec.c b/libavcodec/dvbsubdec.c
index b410a24b25..b51603f30e 100644
--- a/libavcodec/dvbsubdec.c
+++ b/libavcodec/dvbsubdec.c
@@ -1035,6 +1035,10 @@ static void dvbsub_parse_region_segment(AVCodecContext *avctx,
     }
 
     region->depth = 1 << (((*buf++) >> 2) & 7);
+    if(region->depth<2 || region->depth>8){
+        av_log(avctx, AV_LOG_ERROR, "region depth %d is invalid\n", region->depth);
+        region->depth= 4;
+    }
     region->clut = *buf++;
 
     if (region->depth == 8)
-- 
cgit v1.2.3