dsicinav: Clip the source size to the expected maximum
A packet larger than cin->bitmap_size does not make sense.
Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
(cherry picked from commit fd81899321
)
Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
This commit is contained in:
@@ -244,6 +244,8 @@ static int cinvideo_decode_frame(AVCodecContext *avctx,
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
bitmap_frame_size = FFMIN(cin->bitmap_size, bitmap_frame_size);
|
||||||
|
|
||||||
/* note: the decoding routines below assumes that
|
/* note: the decoding routines below assumes that
|
||||||
* surface.width = surface.pitch */
|
* surface.width = surface.pitch */
|
||||||
switch (bitmap_frame_type) {
|
switch (bitmap_frame_type) {
|
||||||
|
Reference in New Issue
Block a user