anm: prevent infinite loop

Signed-off-by: Janne Grunau <janne-libav@jannau.net>
14 years ago · 2475f1a83c
parent 6de33611c9
commit 2475f1a83c
1 changed files with 2 additions and 0 deletions
--- a/libavcodec/anm.c
+++ b/libavcodec/anm.c
@ -81,6 +81,8 @@ static inline int op(uint8_t **dst, const uint8_t *dst_end,
        int striplen = FFMIN(count, remaining);
        if (buf) {
            striplen = FFMIN(striplen, buf_end - *buf);
+            if (*buf >= buf_end)
+                goto exhausted;
            memcpy(*dst, *buf, striplen);
            *buf += striplen;
        } else if (pixel >= 0)