diff options
| author | Michael Niedermayer <michaelni@gmx.at> | 2012-08-15 03:57:45 +0400 |
|---|---|---|
| committer | Michael Niedermayer <michaelni@gmx.at> | 2012-08-15 03:57:45 +0400 |
| commit | 456f0c6477925611f1b45a434795f8bad4fb2a66 (patch) | |
| tree | 9938051036b91f2cb920854ee3adc8b4e39400f5 | |
| parent | 02f12de1c25789913b72c98c5bda3d521ede7b8b (diff) | |
pafdec: fix wrong palette index check.
Fixes Ticket1641
Found-by: Piotr Bandurski <ami_stuff@o2.pl>
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
| -rw-r--r-- | libavcodec/paf.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libavcodec/paf.c b/libavcodec/paf.c index 1c3e8b8fcd..388e2a082c 100644 --- a/libavcodec/paf.c +++ b/libavcodec/paf.c @@ -276,7 +276,7 @@ static int paf_vid_decode(AVCodecContext *avctx, void *data, index = bytestream2_get_byte(&c->gb); count = bytestream2_get_byte(&c->gb) + 1; - if (index + count > AVPALETTE_SIZE) + if (index + count > 256) return AVERROR_INVALIDDATA; if (bytestream2_get_bytes_left(&c->gb) < 3 * AVPALETTE_SIZE) return AVERROR_INVALIDDATA; |