mirror of
https://gitee.com/openharmony/third_party_ffmpeg
synced 2024-11-24 03:39:45 +00:00
avcodec/mjpegdec: Check len in ff_mjpeg_decode_dqt()
Fixes CID1239060 Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
parent
6d3f17838d
commit
dc35a58149
@ -163,6 +163,11 @@ int ff_mjpeg_decode_dqt(MJpegDecodeContext *s)
|
||||
|
||||
len = get_bits(&s->gb, 16) - 2;
|
||||
|
||||
if (8*len > get_bits_left(&s->gb)) {
|
||||
av_log(s->avctx, AV_LOG_ERROR, "dqt: len %d is too large\n", len);
|
||||
return AVERROR_INVALIDDATA;
|
||||
}
|
||||
|
||||
while (len >= 65) {
|
||||
int pr = get_bits(&s->gb, 4);
|
||||
if (pr > 1) {
|
||||
|
Loading…
Reference in New Issue
Block a user