From 438abdaaeb59d88cacddf4e8b567c3b2629f34f2 Mon Sep 17 00:00:00 2001 From: Vitor Sessak Date: Wed, 6 Aug 2008 05:06:10 +0000 Subject: Check available size before writing in decode_frame() Originally committed as revision 14637 to svn://svn.ffmpeg.org/ffmpeg/trunk --- libavcodec/ra144.c | 3 +++ 1 file changed, 3 insertions(+) (limited to 'libavcodec/ra144.c') diff --git a/libavcodec/ra144.c b/libavcodec/ra144.c index fc99655e80..649dfac33e 100644 --- a/libavcodec/ra144.c +++ b/libavcodec/ra144.c @@ -315,6 +315,9 @@ static int ra144_decode_frame(AVCodecContext * avctx, void *vdata, RA144Context *ractx = avctx->priv_data; GetBitContext gb; + if (*data_size < 2*160) + return -1; + if(buf_size < 20) { av_log(avctx, AV_LOG_ERROR, "Frame too small (%d bytes). Truncated file?\n", buf_size); -- cgit v1.2.3