On Mon, Aug 05, 2013 at 08:40:28AM +0200, Luca Barbato wrote: > Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind > CC: [email protected] > --- > libavcodec/vc1dec.c | 6 ++++++ > 1 file changed, 6 insertions(+) > > diff --git a/libavcodec/vc1dec.c b/libavcodec/vc1dec.c > index 20633d7..0feff21 100644 > --- a/libavcodec/vc1dec.c > +++ b/libavcodec/vc1dec.c > @@ -5966,6 +5966,12 @@ static int vc1_decode_frame(AVCodecContext *avctx, > void *data, > s->uvlinesize <<= 1; > } > mb_height = s->mb_height >> v->field_mode; > + > + if (!mb_height) { > + av_log(v->s.avctx, AV_LOG_ERROR, "Invalid mb_height.\n"); > + goto err; > + } > + > for (i = 0; i <= n_slices; i++) { > if (i > 0 && slices[i - 1].mby_start >= mb_height) { > if (v->field_mode <= 0) { > --
LGTM _______________________________________________ libav-devel mailing list [email protected] https://lists.libav.org/mailman/listinfo/libav-devel
