mirror of https://git.ffmpeg.org/ffmpeg.git
vc1dec: odd sized sprites are unsupported
It should be easy to add support but without a sample we would not know if they work. Fixes out of array reads Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
parent
d929364814
commit
058e1f8dd7
|
@ -5292,6 +5292,11 @@ static av_cold int vc1_decode_init(AVCodecContext *avctx)
|
|||
v->sprite_height > 1 << 14 ||
|
||||
v->output_width > 1 << 14 ||
|
||||
v->output_height > 1 << 14) return -1;
|
||||
|
||||
if ((v->sprite_width&1) || (v->sprite_height&1)) {
|
||||
av_log(avctx, AV_LOG_ERROR, "odd sprite\n");
|
||||
return AVERROR_PATCHWELCOME;
|
||||
}
|
||||
}
|
||||
return 0;
|
||||
}
|
||||
|
|
Loading…
Reference in New Issue