mss2: do not try to read too many palette entries
Reported by Michael Niedermayer <michaelni@gmx.at> Signed-off-by: Kostya Shishkov <kostya.shishkov@gmail.com>
This commit is contained in:
parent
59383d5740
commit
6ceef07b21
@ -161,7 +161,7 @@ static int decode_pal_v2(MSS12Context *ctx, const uint8_t *buf, int buf_size)
|
|||||||
return 0;
|
return 0;
|
||||||
|
|
||||||
ncol = *buf++;
|
ncol = *buf++;
|
||||||
if (buf_size < 2 + ncol * 3)
|
if (ncol > ctx->free_colours || buf_size < 2 + ncol * 3)
|
||||||
return -1;
|
return -1;
|
||||||
for (i = 0; i < ncol; i++)
|
for (i = 0; i < ncol; i++)
|
||||||
*pal++ = AV_RB24(buf + 3 * i);
|
*pal++ = AV_RB24(buf + 3 * i);
|
||||||
|
Loading…
x
Reference in New Issue
Block a user