From 4784b0922febe020c31e0fc6b37dd8b4d86b28f0 Mon Sep 17 00:00:00 2001 From: Vitor Sessak Date: Fri, 26 Feb 2010 18:12:27 +0000 Subject: Do not read beyond end of input in EA-TGV. This should avoid FATE test #362 result depending on uninitialized data. FATE result may change for this test. Originally committed as revision 22082 to svn://svn.ffmpeg.org/ffmpeg/trunk --- libavcodec/eatgv.c | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'libavcodec/eatgv.c') diff --git a/libavcodec/eatgv.c b/libavcodec/eatgv.c index bfaf2d4158..5eb31b7fc8 100644 --- a/libavcodec/eatgv.c +++ b/libavcodec/eatgv.c @@ -192,6 +192,10 @@ static int tgv_decode_inter(TgvContext * s, const uint8_t *buf, const uint8_t *b s->block_codebook[i][15-j] = tmp[get_bits(&gb, 2)]; } + if (get_bits_left(&gb) < vector_bits * + (s->avctx->height/4) * (s->avctx->width/4)) + return -1; + /* read vectors and build frame */ for(y=0; yavctx->height/4; y++) for(x=0; xavctx->width/4; x++) { -- cgit v1.2.3