avcodec/zmbv: Check len before reading in decode_frame()
authorMichael Niedermayer <michaelni@gmx.at>
Wed, 25 Feb 2015 11:29:10 +0000 (12:29 +0100)
committerMichael Niedermayer <michaelni@gmx.at>
Fri, 13 Mar 2015 16:06:09 +0000 (17:06 +0100)
commitfacd212f4a14f7b14bfe494d07cc34f89d8ee657
tree60489316ad4d834e1845a9f29f887c77f495fc9b
parentec02afcb6e3302f00c1f5da3f59a46e84f36e965
avcodec/zmbv: Check len before reading in decode_frame()

Fixes out of array read
Fixes: asan_heap-oob_4d4eb0_3994_cov_3169972261_zmbv_15bit.avi

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 1f5c7781e63d6519192ada59c1e36bcecc92791d)

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
libavcodec/zmbv.c