vc1: Do not read from array if index is invalid.
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org Signed-off-by: Ronald S. Bultje <rsbultje@gmail.com>
This commit is contained in:
committed by
Ronald S. Bultje
parent
2ad405548b
commit
95b192de5d
@@ -492,7 +492,7 @@ static int decode_sequence_header_adv(VC1Context *v, GetBitContext *gb)
|
||||
int nr, dr;
|
||||
nr = get_bits(gb, 8);
|
||||
dr = get_bits(gb, 4);
|
||||
if (nr && nr < 8 && dr && dr < 3) {
|
||||
if (nr > 0 && nr < 8 && dr > 0 && dr < 3) {
|
||||
v->s.avctx->time_base.num = ff_vc1_fps_dr[dr - 1];
|
||||
v->s.avctx->time_base.den = ff_vc1_fps_nr[nr - 1] * 1000;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user