avcodec/snowdec: Fix ref value check
authorMichael Niedermayer <michaelni@gmx.at>
Tue, 24 Feb 2015 02:12:22 +0000 (03:12 +0100)
committerMichael Niedermayer <michaelni@gmx.at>
Fri, 13 Mar 2015 16:06:09 +0000 (17:06 +0100)
commitec02afcb6e3302f00c1f5da3f59a46e84f36e965
treee4eafb6b6c9f22148d223d7cc1f01fb2f9fbfc4d
parent81f80d7b48ec0e8b1e5c68304345877773d29362
avcodec/snowdec: Fix ref value check

Fixes integer overflow and out of array read.
Fixes: signal_sigsegv_24169e6_3445_cov_3778346427_snow_chroma_bug.avi

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 8f4cbf940212079a34753c7f4d6c6b5a43586d30)

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
libavcodec/snowdec.c