[FFmpeg-devel] [PATCH] Decode PGS subtitle multipacket RLE data

Reimar Döffinger Reimar.Doeffinger
Sat Nov 6 22:55:54 CET 2010

On Sat, Nov 06, 2010 at 02:32:33PM -0700, Mark Goodman wrote:
> The width and height bytes are included in the encoded length so
> subtract four bytes from the encoded length.

There is not enough validation.
The decoder is already really crappy in that regard, but the code
really needs to check that it has all necessary data upon display
(or whenever else it uses it) and at the very least print an error
message if not.

More information about the ffmpeg-devel mailing list