mirror of
https://github.com/xenia-project/FFmpeg.git
synced 2025-02-04 19:17:28 +00:00
rpza: limit the number of blocks to the total remaining blocks in the frame
Fixes invalid writes. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC:libav-stable@libav.org
This commit is contained in:
parent
a46dc49744
commit
77bb0004bb
@ -119,6 +119,8 @@ static void rpza_decode_stream(RpzaContext *s)
|
||||
}
|
||||
}
|
||||
|
||||
n_blocks = FFMIN(n_blocks, total_blocks);
|
||||
|
||||
switch (opcode & 0xe0) {
|
||||
|
||||
/* Skip blocks */
|
||||
|
Loading…
x
Reference in New Issue
Block a user