avcodec/rv40: Test remaining space in loop of get_dimension()
authorMichael Niedermayer <michael@niedermayer.cc>
Tue, 15 Nov 2016 21:50:35 +0000 (22:50 +0100)
committerMichael Niedermayer <michael@niedermayer.cc>
Sun, 4 Dec 2016 19:25:15 +0000 (20:25 +0100)
commit63caf18787d569fb4ba85ea4790134d2503fabef
treea2ad0c883691a3744144be12748a0600085557f0
parent8ad4e1c1cb74294b58bccb58c54e5e0ee2b6f297
avcodec/rv40: Test remaining space in loop of get_dimension()

Fixes infinite loop
Fixes: 178/fuzz-3-ffmpeg_VIDEO_AV_CODEC_ID_RV40_fuzzer

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 1546d487cf12da37d90a080813f8d57ac33036bf)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
libavcodec/rv40.c