diff options
| author | Limin Wang <lance.lmwang@gmail.com> | 2021-09-13 15:27:05 +0300 |
|---|---|---|
| committer | Limin Wang <lance.lmwang@gmail.com> | 2021-09-22 04:25:25 +0300 |
| commit | a487635b85d856ac3b02d4b2babe40279155cc9a (patch) | |
| tree | d56655771fea530ef94f8fbdf4f7f9bc30b6b36e /libavcodec | |
| parent | 4c079636abf059a54b84d3da015dcd8669ef6471 (diff) | |
avcodec/dynamic_hdr10_plus: check size before using it
Reviewed-by: Andreas Rheinhardt <andreas.rheinhardt@outlook.com>
Signed-off-by: Limin Wang <lance.lmwang@gmail.com>
Diffstat (limited to 'libavcodec')
| -rw-r--r-- | libavcodec/dynamic_hdr10_plus.c | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/libavcodec/dynamic_hdr10_plus.c b/libavcodec/dynamic_hdr10_plus.c index 854e70d455..34a44aac65 100644 --- a/libavcodec/dynamic_hdr10_plus.c +++ b/libavcodec/dynamic_hdr10_plus.c @@ -40,10 +40,10 @@ int ff_parse_itu_t_t35_to_dynamic_hdr10_plus(AVDynamicHDRPlus *s, const uint8_t if (ret < 0) return ret; - s->application_version = get_bits(gb, 8); - - if (get_bits_left(gb) < 2) + if (get_bits_left(gb) < 10) return AVERROR_INVALIDDATA; + + s->application_version = get_bits(gb, 8); s->num_windows = get_bits(gb, 2); if (s->num_windows < 1 || s->num_windows > 3) { |