avcodec/snowdec: Fix ref value check
authorMichael Niedermayer <michaelni@gmx.at>
Tue, 24 Feb 2015 02:12:22 +0000 (03:12 +0100)
committerMichael Niedermayer <michaelni@gmx.at>
Sat, 14 Mar 2015 13:27:23 +0000 (14:27 +0100)
commitc4d250abcaf72f57c2937043dc6bdb502bfb9c69
tree5051208ff11bb90c012d40e97ddafc81af1f83fa
parentd125abfa748797e80fa6458e86260f5ddb1ef2cc
avcodec/snowdec: Fix ref value check

Fixes integer overflow and out of array read.
Fixes: signal_sigsegv_24169e6_3445_cov_3778346427_snow_chroma_bug.avi

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 8f4cbf940212079a34753c7f4d6c6b5a43586d30)

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
libavcodec/snowdec.c