From 33796645dc35511ff7419b96535ad05dd73ffde8 Mon Sep 17 00:00:00 2001
From: Michael Niedermayer <michaelni@gmx.at>
Date: Sun, 24 Feb 2013 13:03:13 +0100
Subject: [PATCH] loco: check the last plane too
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
---
libavcodec/loco.c | 6 +++++-
1 file changed, 5 insertions(+), 1 deletion(-)
diff --git a/libavcodec/loco.c b/libavcodec/loco.c
index 559f7c2026a..e21e693166c 100644
--- a/libavcodec/loco.c
+++ b/libavcodec/loco.c
@@ -240,10 +240,14 @@ static int decode_frame(AVCodecContext *avctx,
break;
}
+ if (decoded < 0 || decoded > buf_size)
+ goto buf_too_small;
+ buf_size -= decoded;
+
*got_frame = 1;
*(AVFrame*)data = l->pic;
- return buf_size < 0 ? -1 : avpkt->size - buf_size;
+ return avpkt->size - buf_size;
buf_too_small:
av_log(avctx, AV_LOG_ERROR, "Input data too small.\n");
return AVERROR(EINVAL);
--
GitLab