avcodec/zmbv: Check len before reading in decode_frame()
authorMichael Niedermayer <michaelni@gmx.at>
Wed, 25 Feb 2015 11:29:10 +0000 (12:29 +0100)
committerMichael Niedermayer <michaelni@gmx.at>
Thu, 12 Mar 2015 17:03:50 +0000 (18:03 +0100)
commit0c1f8a784db9d60f30f838153f03e325437ec844
tree2ffc97dc397a3b905ac9ea58469b70a0550d01d2
parent07a9a43d5c1f6c4abcaba38d1e398aea6ad23802
avcodec/zmbv: Check len before reading in decode_frame()

Fixes out of array read
Fixes: asan_heap-oob_4d4eb0_3994_cov_3169972261_zmbv_15bit.avi

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 1f5c7781e63d6519192ada59c1e36bcecc92791d)

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
libavcodec/zmbv.c