Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/FFmpeg/FFmpeg.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMichael Niedermayer <michaelni@gmx.at>2013-09-28 00:53:24 +0400
committerMichael Niedermayer <michaelni@gmx.at>2013-09-28 01:13:29 +0400
commit3e0c78bac63c213649c3e8c2fa49e9f3c9848d5a (patch)
tree933fd35c0850a6a4931e6ab62b25971a759a21cf
parentc2d19430290da381c2f95a789a0961199bf5bf8f (diff)
avcodec/imc: Check flcoeffs5
Fixes infinite loop Fixes Ticket2996 Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
-rw-r--r--libavcodec/imc.c7
1 files changed, 6 insertions, 1 deletions
diff --git a/libavcodec/imc.c b/libavcodec/imc.c
index f4469c4964..a72a6dfed1 100644
--- a/libavcodec/imc.c
+++ b/libavcodec/imc.c
@@ -451,8 +451,13 @@ static int bit_allocation(IMCContext *q, IMCChannel *chctx,
for (i = 0; i < BANDS; i++)
highest = FFMAX(highest, chctx->flcoeffs1[i]);
- for (i = 0; i < BANDS - 1; i++)
+ for (i = 0; i < BANDS - 1; i++) {
+ if (chctx->flcoeffs5[i] <= 0) {
+ av_log(NULL, AV_LOG_ERROR, "flcoeffs5 %f invalid\n", chctx->flcoeffs5[i]);
+ return AVERROR_INVALIDDATA;
+ }
chctx->flcoeffs4[i] = chctx->flcoeffs3[i] - log2f(chctx->flcoeffs5[i]);
+ }
chctx->flcoeffs4[BANDS - 1] = limit;
highest = highest * 0.25;