rpza: limit the number of blocks to the total remaining blocks in the frame
Fixes invalid writes. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC:libav-stable@libav.org
This commit is contained in:
parent
a46dc49744
commit
77bb0004bb
@ -119,6 +119,8 @@ static void rpza_decode_stream(RpzaContext *s)
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
n_blocks = FFMIN(n_blocks, total_blocks);
|
||||||
|
|
||||||
switch (opcode & 0xe0) {
|
switch (opcode & 0xe0) {
|
||||||
|
|
||||||
/* Skip blocks */
|
/* Skip blocks */
|
||||||
|
Loading…
x
Reference in New Issue
Block a user