From 4393e6392c123142eb248d62d4109fb422ce99e3 Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Sat, 3 Dec 2005 14:20:03 +0000 Subject: [PATCH] check block_max_depth (fixes crash) Originally committed as revision 4718 to svn://svn.ffmpeg.org/ffmpeg/trunk --- libavcodec/snow.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/libavcodec/snow.c b/libavcodec/snow.c index fb518315cc..4207951ffa 100644 --- a/libavcodec/snow.c +++ b/libavcodec/snow.c @@ -3185,6 +3185,11 @@ static int decode_header(SnowContext *s){ s->mv_scale= get_symbol(&s->c, s->header_state, 0); s->qbias= get_symbol(&s->c, s->header_state, 1); s->block_max_depth= get_symbol(&s->c, s->header_state, 0); + if(s->block_max_depth > 1){ + av_log(s->avctx, AV_LOG_ERROR, "block_max_depth= %d is too large", s->block_max_depth); + s->block_max_depth= 0; + return -1; + } return 0; }