generic-library/ffmpeg
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

mpeg4videodec: only allow a positive length

Browse Source 
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit b3408ae4c6)

Conflicts:

	libavcodec/mpeg4videodec.c
This commit is contained in:
Andreas Cadhalpun
2015-04-22 16:32:42 +02:00
committed by Michael Niedermayer
parent 0b5405c443
commit 3339bae219
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
libavcodec/mpeg4videodec.c
View File

@@ -186,13 +186,13 @@ static int mpeg4_decode_sprite_trajectory(MpegEncContext *s, GetBitContext *gb)
int x=0, y=0; int x=0, y=0;
length= get_vlc2(gb, sprite_trajectory.table, SPRITE_TRAJ_VLC_BITS, 3); length= get_vlc2(gb, sprite_trajectory.table, SPRITE_TRAJ_VLC_BITS, 3);
if(length){ if(length > 0){
x= get_xbits(gb, length); x= get_xbits(gb, length);
} }
if(!(s->divx_version==500 && s->divx_build==413)) skip_bits1(gb); /* marker bit */ if(!(s->divx_version==500 && s->divx_build==413)) skip_bits1(gb); /* marker bit */
length= get_vlc2(gb, sprite_trajectory.table, SPRITE_TRAJ_VLC_BITS, 3); length= get_vlc2(gb, sprite_trajectory.table, SPRITE_TRAJ_VLC_BITS, 3);
if(length){ if(length > 0){
y=get_xbits(gb, length); y=get_xbits(gb, length);
} }
skip_bits1(gb); /* marker bit */ skip_bits1(gb); /* marker bit */