From f320722eb5e3af84860063827636369115094ab5 Mon Sep 17 00:00:00 2001
From: rcombs <rcombs@rcombs.me>
Date: Thu, 23 Dec 2021 19:48:24 -0600
Subject: lavfi/drawutils: ensure we can't overflow a component

---
 libavfilter/drawutils.c | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'libavfilter')

diff --git a/libavfilter/drawutils.c b/libavfilter/drawutils.c
index 99c124822d..bcdb669bd3 100644
--- a/libavfilter/drawutils.c
+++ b/libavfilter/drawutils.c
@@ -112,6 +112,8 @@ int ff_draw_init(FFDrawContext *draw, enum AVPixelFormat format, unsigned flags)
         if (depthb && (depthb != db))
             return AVERROR(ENOSYS);
         depthb = db;
+        if (db * (c->offset + 1) > 16)
+            return AVERROR(ENOSYS);
         /* strange interleaving */
         if (pixelstep[c->plane] != 0 &&
             pixelstep[c->plane] != c->step)
-- 
cgit v1.2.3