On Thu, Sep 12, 2013 at 01:18:26PM +0300, Martin Storsjö wrote:
> If idx equaled num_coeffs - 1 on entry to the loop, the previous
> check failed to break out of the loop.
> 
> Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
> CC: [email protected]
> ---
>  libavcodec/proresdec.c |    2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/libavcodec/proresdec.c b/libavcodec/proresdec.c
> index c13b769..c3b480f 100644
> --- a/libavcodec/proresdec.c
> +++ b/libavcodec/proresdec.c
> @@ -496,7 +496,7 @@ static void unpack_alpha(GetBitContext *gb, uint16_t 
> *dst, int num_coeffs,
>                  dst[idx++] = alpha_val >> 6;
>              else
>                  dst[idx++] = (alpha_val << 2) | (alpha_val >> 6);
> -            if (idx == num_coeffs - 1)
> +            if (idx >= num_coeffs - 1)
>                  break;
>          } while (get_bits1(gb));
>          val = get_bits(gb, 4);
> -- 

should be OK
_______________________________________________
libav-devel mailing list
[email protected]
https://lists.libav.org/mailman/listinfo/libav-devel

Reply via email to