xwddec: prevent overflow of lsize * avctx->height
authorAndreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
Fri, 18 Dec 2015 18:28:51 +0000 (19:28 +0100)
committerAndreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
Sun, 20 Dec 2015 15:13:40 +0000 (16:13 +0100)
commitdcecc180a6ad9e05f2b1f5802ec04c95a4cc6a8d
tree3308e1b8be80752a984047de91a23abb69075e3f
parent2306964b3a0336e24d1c9d04bd54aaecf2d198d7
xwddec: prevent overflow of lsize * avctx->height

This is used to check if the input buffer is large enough, so if this
overflows it can cause a false negative leading to a segmentation fault
in bytestream2_get_bufferu.

Reviewed-by: Michael Niedermayer <michael@niedermayer.cc>
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
(cherry picked from commit 9d38f06d05efbb9d6196c27668eb943e934943ae)
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
libavcodec/xwddec.c