diff options
| author | Laurent Aimar <fenrir@videolan.org> | 2011-09-08 01:12:32 +0400 |
|---|---|---|
| committer | Reinhard Tartler <siretart@tauware.de> | 2011-12-24 15:20:32 +0400 |
| commit | 9864518544f85ca8f0c2764fd66d728c47652bcc (patch) | |
| tree | 9f14e9266750b12fd5ce7b1d62359ae4eb7e1303 /libavcodec | |
| parent | 4ccb8f5b7b99ebaab5032f0d1b2b42906e3a14c5 (diff) | |
Fixed invalid access in wavpack decoder on corrupted extra bits sub-blocks.
Signed-off-by: Martin Storsjö <martin@martin.st>
(cherry picked from commit beefafda639dd53fc59c21d8a7cf8334da9a1062)
Signed-off-by: Anton Khirnov <anton@khirnov.net>
Signed-off-by: Reinhard Tartler <siretart@tauware.de>
Diffstat (limited to 'libavcodec')
| -rw-r--r-- | libavcodec/wavpack.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libavcodec/wavpack.c b/libavcodec/wavpack.c index 7358d29735..3963a6003d 100644 --- a/libavcodec/wavpack.c +++ b/libavcodec/wavpack.c @@ -368,7 +368,7 @@ static inline int wv_get_value_integer(WavpackContext *s, uint32_t *crc, int S) if(s->extra_bits){ S <<= s->extra_bits; - if(s->got_extra_bits){ + if(s->got_extra_bits && get_bits_left(&s->gb_extra_bits) >= s->extra_bits){ S |= get_bits(&s->gb_extra_bits, s->extra_bits); *crc = *crc * 9 + (S&0xffff) * 3 + ((unsigned)S>>16); } |