flashsv: Check diff_start diff_height values
authorMichael Niedermayer <michaelni@gmx.at>
Tue, 20 Aug 2013 21:18:48 +0000 (23:18 +0200)
committerReinhard Tartler <siretart@tauware.de>
Sat, 1 Feb 2014 19:06:24 +0000 (14:06 -0500)
commitcb5d0ea0bec119ecbe327bd7d3834987ab42ec1a
tree3016afb959ecea9bfcdd36ce51c8047ef88a0447
parentef6c90e102a393c136a38c1eee42bfd26e964de5
flashsv: Check diff_start diff_height values

Fix out of array accesses.

Found-by: ami_stuff
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
Adresses: CVE-2013-7015
(cherry picked from commit 57070b1468edc6ac8cb3696c817f3c943975d4c1)
Signed-off-by: Reinhard Tartler <siretart@tauware.de>
(cherry picked from commit 10d48fe6d3963842319b1d8d738a318020836e72)
Signed-off-by: Reinhard Tartler <siretart@tauware.de>
libavcodec/flashsv.c