And another sechole ...

Originally committed as revision 16346 to svn://svn.ffmpeg.org/ffmpeg/trunk
16 years ago · eb0094b224
parent 268309750b
commit eb0094b224
1 changed files with 1 additions and 1 deletions
--- a/libavcodec/faxcompr.c
+++ b/libavcodec/faxcompr.c
@ -217,7 +217,7 @@ static int decode_group3_2d_line(AVCodecContext *avctx, GetBitContext *gb,
            else
                run_off -= *--ref;
            offs += run;
-            if(offs > width){
+            if(offs > width || run > width){
                av_log(avctx, AV_LOG_ERROR, "Run went out of bounds\n");
                return -1;
            }