mirror of https://git.ffmpeg.org/ffmpeg.git
wavpack: Properly check channel index, dont write out of arrays
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
parent
a803ca54e5
commit
107e9e4432
|
@ -788,11 +788,6 @@ static int wavpack_decode_block(AVCodecContext *avctx, int block_no,
|
|||
return AVERROR_INVALIDDATA;
|
||||
}
|
||||
|
||||
if (wc->ch_offset >= avctx->channels) {
|
||||
av_log(avctx, AV_LOG_ERROR, "too many channels\n");
|
||||
return -1;
|
||||
}
|
||||
|
||||
memset(s->decorr, 0, MAX_TERMS * sizeof(Decorr));
|
||||
memset(s->ch, 0, sizeof(s->ch));
|
||||
s->extra_bits = 0;
|
||||
|
@ -829,6 +824,11 @@ static int wavpack_decode_block(AVCodecContext *avctx, int block_no,
|
|||
s->hybrid_minclip = ((-1LL << (orig_bpp - 1)));
|
||||
s->CRC = bytestream2_get_le32(&gb);
|
||||
|
||||
if (wc->ch_offset + s->stereo >= avctx->channels) {
|
||||
av_log(avctx, AV_LOG_ERROR, "too many channels\n");
|
||||
return -1;
|
||||
}
|
||||
|
||||
samples_l = data[wc->ch_offset];
|
||||
if (s->stereo)
|
||||
samples_r = data[wc->ch_offset + 1];
|
||||
|
|
Loading…
Reference in New Issue