mpc8: Check out of bound bands limit

Signed-off-by: Janne Grunau <janne-libav@jannau.net>
13 years ago · 9bd854b1ff
parent 7d17a794f0
commit 9bd854b1ff
1 changed files with 2 additions and 0 deletions
--- a/libavcodec/mpc8.c
+++ b/libavcodec/mpc8.c
@ -266,6 +266,8 @@ static int mpc8_decode_frame(AVCodecContext * avctx,
        maxband = c->last_max_band + get_vlc2(gb, band_vlc.table, MPC8_BANDS_BITS, 2);
        if(maxband > 32) maxband -= 33;
    }
+    if(maxband > c->maxbands)
+        return AVERROR_INVALIDDATA;
    c->last_max_band = maxband;

    /* read subband indexes */