rle_code can overflow when multiplied by 4

(fixes Animation-256Greys.mov from mphq)

Originally committed as revision 2786 to svn://svn.ffmpeg.org/ffmpeg/trunk
pull/126/head
Roberto Togni 21 years ago
parent 50ee2c4131
commit e102fcf7f0
  1. 2
      libavcodec/qtrle.c

@ -84,7 +84,7 @@ static void qtrle_decode_8bpp(QtrleContext *s)
int header; int header;
int start_line; int start_line;
int lines_to_change; int lines_to_change;
signed char rle_code; int rle_code;
int row_ptr, pixel_ptr; int row_ptr, pixel_ptr;
int row_inc = s->frame.linesize[0]; int row_inc = s->frame.linesize[0];
unsigned char pi1, pi2, pi3, pi4; /* 4 palette indices */ unsigned char pi1, pi2, pi3, pi4; /* 4 palette indices */

Loading…
Cancel
Save