utvideodec: Handle slice_height being zero
authorMichael Niedermayer <michaelni@gmx.at>
Wed, 4 Mar 2015 17:36:14 +0000 (17:36 +0000)
committerLuca Barbato <lu_zero@gentoo.org>
Sun, 8 Mar 2015 23:51:15 +0000 (00:51 +0100)
commit0ce3a0f9d9523a9bcad4c6d451ca5bbd7a4f420d
tree88eb00f443dc757e16ddca2827697e5dc71ff67f
parent7b9cb7b36543c2a0e46d99b0e41824b9e7dd0c8f
utvideodec: Handle slice_height being zero

Fixes out of array accesses.

CC: libav-stable@libav.org
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Bug-Id: CVE-2014-9604
Signed-off-by: Vittorio Giovara <vittorio.giovara@gmail.com>
Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
libavcodec/utvideodec.c