avcodec/ff_h264_decode_sei: fix integer overflow with size.
authorMichael Niedermayer <michaelni@gmx.at>
Sun, 21 Jul 2013 14:34:14 +0000 (16:34 +0200)
committerMichael Niedermayer <michaelni@gmx.at>
Sun, 21 Jul 2013 15:57:15 +0000 (17:57 +0200)
This issue is hypothetical and no testcase is available.

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
libavcodec/h264_sei.c

index 2ac9588..3003080 100644 (file)
@@ -244,7 +244,8 @@ static int decode_frame_packing(H264Context *h, int size){
 
 int ff_h264_decode_sei(H264Context *h){
     while (get_bits_left(&h->gb) > 16) {
-        int size, type;
+        int type;
+        unsigned size;
 
         type=0;
         do{