avcodec/rv40: Test remaining space in loop of get_dimension()
authorMichael Niedermayer <michael@niedermayer.cc>
Tue, 15 Nov 2016 21:50:35 +0000 (22:50 +0100)
committerMichael Niedermayer <michael@niedermayer.cc>
Mon, 5 Dec 2016 17:29:12 +0000 (18:29 +0100)
commit936d07ab2548a0a95f1e8f4dc2f350a360b81537
tree2f2a4dacaef5aca15f7305838ebb578b959623fe
parent571d4af28135f2d5d993436757465c95a7c96072
avcodec/rv40: Test remaining space in loop of get_dimension()

Fixes infinite loop
Fixes: 178/fuzz-3-ffmpeg_VIDEO_AV_CODEC_ID_RV40_fuzzer

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 1546d487cf12da37d90a080813f8d57ac33036bf)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
libavcodec/rv40.c