nuv: check buffer size before checking content.

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
pull/5/head
Michael Niedermayer 13 years ago
parent 096231d497
commit ebf6d1d295
  1. 2
      libavcodec/nuv.c

@ -191,7 +191,7 @@ retry:
} }
if (c->codec_frameheader) { if (c->codec_frameheader) {
int w, h, q, res; int w, h, q, res;
if (buf[0] != 'V' || buf_size < 12) { if (buf_size < 12 || buf[0] != 'V') {
av_log(avctx, AV_LOG_ERROR, "invalid nuv video frame (wrong codec_tag?)\n"); av_log(avctx, AV_LOG_ERROR, "invalid nuv video frame (wrong codec_tag?)\n");
return AVERROR_INVALIDDATA; return AVERROR_INVALIDDATA;
} }

Loading…
Cancel
Save