check block_max_depth (fixes crash)
authorMichael Niedermayer <michaelni@gmx.at>
Sat, 3 Dec 2005 14:20:03 +0000 (14:20 +0000)
committerMichael Niedermayer <michaelni@gmx.at>
Sat, 3 Dec 2005 14:20:03 +0000 (14:20 +0000)
Originally committed as revision 4718 to svn://svn.ffmpeg.org/ffmpeg/trunk

libavcodec/snow.c

index fb51831..4207951 100644 (file)
@@ -3185,6 +3185,11 @@ static int decode_header(SnowContext *s){
     s->mv_scale= get_symbol(&s->c, s->header_state, 0);
     s->qbias= get_symbol(&s->c, s->header_state, 1);
     s->block_max_depth= get_symbol(&s->c, s->header_state, 0);
+    if(s->block_max_depth > 1){
+        av_log(s->avctx, AV_LOG_ERROR, "block_max_depth= %d is too large", s->block_max_depth);
+        s->block_max_depth= 0;
+        return -1;
+    }
 
     return 0;
 }