From 438abdaaeb59d88cacddf4e8b567c3b2629f34f2 Mon Sep 17 00:00:00 2001
From: Vitor Sessak <vitor1001@gmail.com>
Date: Wed, 6 Aug 2008 05:06:10 +0000
Subject: [PATCH] Check available size before writing in decode_frame()
Originally committed as revision 14637 to svn://svn.ffmpeg.org/ffmpeg/trunk
---
libavcodec/ra144.c | 3 +++
1 file changed, 3 insertions(+)
diff --git a/libavcodec/ra144.c b/libavcodec/ra144.c
index fc99655e80..649dfac33e 100644
--- a/libavcodec/ra144.c
+++ b/libavcodec/ra144.c
@@ -315,6 +315,9 @@ static int ra144_decode_frame(AVCodecContext * avctx, void *vdata,
RA144Context *ractx = avctx->priv_data;
GetBitContext gb;
+ if (*data_size < 2*160)
+ return -1;
+
if(buf_size < 20) {
av_log(avctx, AV_LOG_ERROR,
"Frame too small (%d bytes). Truncated file?\n", buf_size);