avcodec/snowdec: Fix ref value check
authorMichael Niedermayer <michaelni@gmx.at>
Tue, 24 Feb 2015 02:12:22 +0000 (03:12 +0100)
committerMichael Niedermayer <michaelni@gmx.at>
Sat, 21 Mar 2015 00:52:51 +0000 (01:52 +0100)
commitdb1a99a209e62d733d13cc63f9b31e74ea39df0e
tree3c135a03bb8787bbb4b94f576d737e94a370f89a
parentfe8c81a0f36bc42904c3f41c16c330a10d51e310
avcodec/snowdec: Fix ref value check

Fixes integer overflow and out of array read.
Fixes: signal_sigsegv_24169e6_3445_cov_3778346427_snow_chroma_bug.avi

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 8f4cbf940212079a34753c7f4d6c6b5a43586d30)

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
libavcodec/snowdec.c