[FFmpeg-devel] [PATCH 1/7] Check for out of bound writes in the wmavoice decoder.
fenrir at elivagar.org
fenrir at elivagar.org
Tue Sep 27 23:43:51 CEST 2011
From: Laurent Aimar <fenrir at videolan.org>
---
libavcodec/wmavoice.c | 2 ++
1 files changed, 2 insertions(+), 0 deletions(-)
diff --git a/libavcodec/wmavoice.c b/libavcodec/wmavoice.c
index 400d963..b2deda4 100644
--- a/libavcodec/wmavoice.c
+++ b/libavcodec/wmavoice.c
@@ -1880,6 +1880,8 @@ static void copy_bits(PutBitContext *pb,
rmn_bits = rmn_bytes = get_bits_left(gb);
if (rmn_bits < nbits)
return;
+ if (nbits > pb->size_in_bits - put_bits_count(pb))
+ return;
rmn_bits &= 7; rmn_bytes >>= 3;
if ((rmn_bits = FFMIN(rmn_bits, nbits)) > 0)
put_bits(pb, rmn_bits, get_bits(gb, rmn_bits));
--
1.7.2.5
More information about the ffmpeg-devel
mailing list