mirror of https://git.ffmpeg.org/ffmpeg.git
exr: make sure that data_size is not bigger than expected
Signed-off-by: Paul B Mahol <onemda@gmail.com>
This commit is contained in:
parent
74a78bfe6c
commit
7b12554c5a
|
@ -270,7 +270,8 @@ static int decode_block(AVCodecContext *avctx, void *tdata,
|
||||||
uncompressed_size = s->scan_line_size * FFMIN(s->scan_lines_per_block, s->ymax - line + 1);
|
uncompressed_size = s->scan_line_size * FFMIN(s->scan_lines_per_block, s->ymax - line + 1);
|
||||||
if ((s->compr == EXR_RAW && (data_size != uncompressed_size ||
|
if ((s->compr == EXR_RAW && (data_size != uncompressed_size ||
|
||||||
line_offset > buf_size - uncompressed_size)) ||
|
line_offset > buf_size - uncompressed_size)) ||
|
||||||
(s->compr != EXR_RAW && line_offset > buf_size - data_size)) {
|
(s->compr != EXR_RAW && (data_size > uncompressed_size ||
|
||||||
|
line_offset > buf_size - data_size))) {
|
||||||
return AVERROR_INVALIDDATA;
|
return AVERROR_INVALIDDATA;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue