From 97980db4870675baf553dc190051161ecffa9d77 Mon Sep 17 00:00:00 2001
From: Aneesh Dogra <lionaneesh@gmail.com>
Date: Mon, 28 Nov 2011 02:26:52 +0530
Subject: indeo3: error out if no motion vector is set.

This fixes a crash on a corrupt bitstream (bugzilla #93).

Signed-off-by: Ronald S. Bultje <rsbultje@gmail.com>
---
 libavcodec/indeo3.c | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'libavcodec/indeo3.c')

diff --git a/libavcodec/indeo3.c b/libavcodec/indeo3.c
index 2c7e96b738..e266aeecec 100644
--- a/libavcodec/indeo3.c
+++ b/libavcodec/indeo3.c
@@ -756,6 +756,8 @@ static int parse_bintree(Indeo3DecodeContext *ctx, AVCodecContext *avctx,
                     av_log(avctx, AV_LOG_ERROR, "SkipCell procedure not implemented yet!\n");
 
                 CHECK_CELL
+                if(!curr_cell.mv_ptr)
+                    return AVERROR_INVALIDDATA;
                 copy_cell(ctx, plane, &curr_cell);
                 return 0;
             }
-- 
cgit v1.2.3