From e0f5f9267a8bc104ec3cefe03873dd2508c46650 Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Sat, 5 Mar 2016 18:18:07 +0100 Subject: avformat/avienc: assert that bits_per_coded_sample is within the supported range (out of array access otherwise) Signed-off-by: Michael Niedermayer --- libavformat/avienc.c | 3 +++ 1 file changed, 3 insertions(+) (limited to 'libavformat/avienc.c') diff --git a/libavformat/avienc.c b/libavformat/avienc.c index 9bf755efba..0cfffb7af7 100644 --- a/libavformat/avienc.c +++ b/libavformat/avienc.c @@ -699,6 +699,9 @@ static int avi_write_packet(AVFormatContext *s, AVPacket *pkt) if (ret2) { int pal_size = 1 << enc->bits_per_coded_sample; int pc_tag, i; + + av_assert0(enc->bits_per_coded_sample >= 0 && enc->bits_per_coded_sample <= 8); + if (pb->seekable && avist->pal_offset) { int64_t cur_offset = avio_tell(pb); avio_seek(pb, avist->pal_offset, SEEK_SET); -- cgit v1.2.3