mirror of
https://gitee.com/openharmony/third_party_ffmpeg
synced 2024-11-23 19:30:05 +00:00
rv30: check block type validity
Prevents crashes with the fuzzed samples from bugs 88, 89 and 125 after "golomb: avoid infinite loop on all-zero input".
This commit is contained in:
parent
2af3dc8698
commit
18d1d5886b
@ -103,7 +103,7 @@ static int rv30_decode_mb_info(RV34DecContext *r)
|
||||
GetBitContext *gb = &s->gb;
|
||||
int code = svq3_get_ue_golomb(gb);
|
||||
|
||||
if(code > 11){
|
||||
if (code < 0 || code > 11) {
|
||||
av_log(s->avctx, AV_LOG_ERROR, "Incorrect MB type code\n");
|
||||
return -1;
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user