On Tue, Nov 29, 2011 at 11:48:29AM +0530, Aneesh Dogra wrote: > Fixes: http://bugzilla.libav.org/show_bug.cgi?id=102 > --- a/libavcodec/indeo3.c > +++ b/libavcodec/indeo3.c > @@ -804,8 +804,10 @@ static int decode_plane(Indeo3DecodeContext *ctx, > AVCodecContext *avctx, > > + if (num_vectors * 2 >= data_size) > + return AVERROR_INVALIDDATA; > /* init the bitreader */ > - init_get_bits(&ctx->gb, &data[num_vectors * 2], data_size << 3); > + init_get_bits(&ctx->gb, &data[num_vectors * 2], data_size-num_vectors*2 > << 3); > ctx->skip_bits = 0;
Please give the operators some room to breathe. Diego _______________________________________________ libav-devel mailing list [email protected] https://lists.libav.org/mailman/listinfo/libav-devel
