avcodec/ffv1dec: Check that there is enough space for the CRC in the global header

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
Michael Niedermayer 2015-09-02 02:10:31 +02:00
parent 1376084dcb
commit eac161451d

View File

@ -594,7 +594,7 @@ static int read_extra_header(FFV1Context *f)
unsigned v;
v = av_crc(av_crc_get_table(AV_CRC_32_IEEE), 0,
f->avctx->extradata, f->avctx->extradata_size);
if (v) {
if (v || f->avctx->extradata_size < 4) {
av_log(f->avctx, AV_LOG_ERROR, "CRC mismatch %X!\n", v);
return AVERROR_INVALIDDATA;
}