From 2e7bc9c2a1f138d305f111bb07d8b70e494584a8 Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Tue, 12 Mar 2013 00:28:08 +0100 Subject: [PATCH] snowdec: fix off by 1 error in dimensions check fixes infinite loop Signed-off-by: Michael Niedermayer --- libavcodec/snowdec.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libavcodec/snowdec.c b/libavcodec/snowdec.c index e2115068c8..1bfd0969c8 100644 --- a/libavcodec/snowdec.c +++ b/libavcodec/snowdec.c @@ -345,7 +345,7 @@ static int decode_header(SnowContext *s){ return -1; } if(FFMIN(s->avctx-> width>>s->chroma_h_shift, - s->avctx->height>>s->chroma_v_shift) >> (s->spatial_decomposition_count-1) <= 0){ + s->avctx->height>>s->chroma_v_shift) >> (s->spatial_decomposition_count-1) <= 1){ av_log(s->avctx, AV_LOG_ERROR, "spatial_decomposition_count %d too large for size\n", s->spatial_decomposition_count); return -1; }