avcodec/rv40: Test remaining space in loop of get_dimension()
authorMichael Niedermayer <michael@niedermayer.cc>
Tue, 15 Nov 2016 21:50:35 +0000 (22:50 +0100)
committerMichael Niedermayer <michael@niedermayer.cc>
Thu, 17 Nov 2016 11:47:40 +0000 (12:47 +0100)
commit0f8de7a3db4a3cee54265c32717ec64ed7941eba
tree947100bc16eca7a1007db34b877d5f040d1b447a
parent7e8eb30f40026e944b62bba8db187da5f9eb8b9f
avcodec/rv40: Test remaining space in loop of get_dimension()

Fixes infinite loop
Fixes: 178/fuzz-3-ffmpeg_VIDEO_AV_CODEC_ID_RV40_fuzzer

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 1546d487cf12da37d90a080813f8d57ac33036bf)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
libavcodec/rv40.c