avcodec/wmaprodec: Check for overread in decode_packet()
Fixes assertion failure
Fixes: 0256e92df2df7e933b43a2c70e4c8040/signal_sigabrt_7ffff6ae7cc9_1358_999ac18684788221490757582ce9af84.wma
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 7ad698e24e
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
@@ -1619,6 +1619,11 @@ static int decode_packet(AVCodecContext *avctx, void *data,
|
|||||||
s->packet_done = 1;
|
s->packet_done = 1;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
if (remaining_bits(s, gb) < 0) {
|
||||||
|
av_log(avctx, AV_LOG_ERROR, "Overread %d\n", -remaining_bits(s, gb));
|
||||||
|
s->packet_loss = 1;
|
||||||
|
}
|
||||||
|
|
||||||
if (s->packet_done && !s->packet_loss &&
|
if (s->packet_done && !s->packet_loss &&
|
||||||
remaining_bits(s, gb) > 0) {
|
remaining_bits(s, gb) > 0) {
|
||||||
/** save the rest of the data so that it can be decoded
|
/** save the rest of the data so that it can be decoded
|
||||||
|
Reference in New Issue
Block a user