avcodec/ffv1dec: Check quant table symbols more completely
authorMichael Niedermayer <michaelni@gmx.at>
Mon, 4 May 2015 11:25:31 +0000 (13:25 +0200)
committerMichael Niedermayer <michaelni@gmx.at>
Mon, 4 May 2015 12:31:45 +0000 (14:31 +0200)
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
libavcodec/ffv1dec.c

index 78d947a..621aac7 100644 (file)
@@ -476,7 +476,7 @@ static int read_quant_table(RangeCoder *c, int16_t *quant_table, int scale)
     for (v = 0; i < 128; v++) {
         unsigned len = get_symbol(c, state, 0) + 1;
 
-        if (len > 128 - i)
+        if (len > 128 - i || !len)
             return AVERROR_INVALIDDATA;
 
         while (len--) {