mirror of
https://git.ffmpeg.org/ffmpeg.git
synced 2024-12-18 05:24:42 +00:00
Fixed invalid access in wavpack decoder on corrupted extra bits sub-blocks.
Signed-off-by: Martin Storsjö <martin@martin.st>
This commit is contained in:
parent
5ea091fb5a
commit
beefafda63
@ -385,7 +385,7 @@ static inline int wv_get_value_integer(WavpackFrameContext *s, uint32_t *crc, in
|
|||||||
if(s->extra_bits){
|
if(s->extra_bits){
|
||||||
S <<= s->extra_bits;
|
S <<= s->extra_bits;
|
||||||
|
|
||||||
if(s->got_extra_bits){
|
if(s->got_extra_bits && get_bits_left(&s->gb_extra_bits) >= s->extra_bits){
|
||||||
S |= get_bits(&s->gb_extra_bits, s->extra_bits);
|
S |= get_bits(&s->gb_extra_bits, s->extra_bits);
|
||||||
*crc = *crc * 9 + (S&0xffff) * 3 + ((unsigned)S>>16);
|
*crc = *crc * 9 + (S&0xffff) * 3 + ((unsigned)S>>16);
|
||||||
}
|
}
|
||||||
|
Loading…
Reference in New Issue
Block a user