indeo4: Fix global array overread.

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
13 years ago · 8a20774a24
parent 5cddfc58d8
commit 8a20774a24
1 changed files with 4 additions and 0 deletions
--- a/libavcodec/indeo4.c
+++ b/libavcodec/indeo4.c
@ -404,6 +404,10 @@ static int decode_band_hdr(IVI4DecContext *ctx, IVIBandDesc *band,
                av_log(avctx, AV_LOG_ERROR, "Custom quant matrix encountered!\n");
                return AVERROR_INVALIDDATA;
            }
+            if (band->quant_mat > 21) {
+                av_log(avctx, AV_LOG_ERROR, "Invalid quant matrix encountered!\n");
+                return AVERROR_INVALIDDATA;
+            }
        }

        /* decode block huffman codebook */