From 39993860e1525ca5d1b07521865b7e9e1b294ed7 Mon Sep 17 00:00:00 2001
From: Laurent Aimar <fenrir@videolan.org>
Date: Sat, 1 Oct 2011 00:44:58 +0200
Subject: [PATCH] Prevent infinite loop in the ANM decoder.

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
---
 libavcodec/anm.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/libavcodec/anm.c b/libavcodec/anm.c
index b84aef1c1b..188f8296f3 100644
--- a/libavcodec/anm.c
+++ b/libavcodec/anm.c
@@ -79,6 +79,8 @@ static inline int op(uint8_t **dst, const uint8_t *dst_end,
         int striplen = FFMIN(count, remaining);
         if (buf) {
             striplen = FFMIN(striplen, buf_end - *buf);
+            if (*buf >= buf_end)
+                goto exhausted;
             memcpy(*dst, *buf, striplen);
             *buf += striplen;
         } else if (pixel >= 0)