From 9bd854b1ff342f82efa6d2ad4e8fefddce5fa731 Mon Sep 17 00:00:00 2001 From: Laurent Aimar Date: Sun, 25 Sep 2011 20:06:20 +0000 Subject: mpc8: Check out of bound bands limit Signed-off-by: Janne Grunau --- libavcodec/mpc8.c | 2 ++ 1 file changed, 2 insertions(+) (limited to 'libavcodec/mpc8.c') diff --git a/libavcodec/mpc8.c b/libavcodec/mpc8.c index a126fc8a8f..b38664215b 100644 --- a/libavcodec/mpc8.c +++ b/libavcodec/mpc8.c @@ -266,6 +266,8 @@ static int mpc8_decode_frame(AVCodecContext * avctx, maxband = c->last_max_band + get_vlc2(gb, band_vlc.table, MPC8_BANDS_BITS, 2); if(maxband > 32) maxband -= 33; } + if(maxband > c->maxbands) + return AVERROR_INVALIDDATA; c->last_max_band = maxband; /* read subband indexes */ -- cgit v1.2.3