[FFmpeg-cvslog] r18640 - trunk/libavcodec/ffv1.c

[michael]

Author: michael
Date: Tue Apr 21 14:00:39 2009
New Revision: 18640

Log:
Fix a possibly exploitable buffer overflow.

Modified:
   trunk/libavcodec/ffv1.c

Modified: trunk/libavcodec/ffv1.c
==============================================================================
--- trunk/libavcodec/ffv1.c	Tue Apr 21 07:42:22 2009	(r18639)
+++ trunk/libavcodec/ffv1.c	Tue Apr 21 14:00:39 2009	(r18640)
@@ -249,10 +249,9 @@ static inline int get_symbol(RangeCoder 
     else{
         int i, e, a;
         e= 0;
-        while(get_rac(c, state+1 + e)){ //1..10
+        while(get_rac(c, state+1 + e) && e<9){ //1..10
             e++;
         }
-        assert(e<=9);
 
         a= 1;
         for(i=e-1; i>=0; i--){