On Sat, Jun 29, 2013 at 02:27:10AM +0200, Luca Barbato wrote: > Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind > CC: [email protected] > --- > > Probably could catch it earlier but I went for the simpler approach. > > libavcodec/wmaprodec.c | 3 ++- > 1 file changed, 2 insertions(+), 1 deletion(-) > > diff --git a/libavcodec/wmaprodec.c b/libavcodec/wmaprodec.c > index 302f58a..d3bd381 100644 > --- a/libavcodec/wmaprodec.c > +++ b/libavcodec/wmaprodec.c > @@ -436,7 +436,8 @@ static av_cold int decode_init(AVCodecContext *avctx) > for (x = 0; x < num_possible_block_sizes; x++) { > int v = 0; > while (s->sfb_offsets[x][v + 1] << x < offset) > - ++v; > + if (++v >= MAX_BANDS) > + return AVERROR_INVALIDDATA; > s->sf_offsets[i][x][b] = v; > } > } > --
probably OK _______________________________________________ libav-devel mailing list [email protected] https://lists.libav.org/mailman/listinfo/libav-devel
