Mercurial > libavcodec.hg

diff vorbis_dec.c @ 10232:1792a26c0bbb libavcodec

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Check dimensions against 0 too. 39_vorbis_zero_dims.patch from chrome
author michael
date Wed, 23 Sep 2009 08:35:29 +0000
parents e99054a89bfe
children 2355ca5dc57c
line wrap: on
line diff
--- a/vorbis_dec.c	Wed Sep 23 07:46:51 2009 +0000
+++ b/vorbis_dec.c	Wed Sep 23 08:35:29 2009 +0000
@@ -244,8 +244,8 @@
         }
 
         codebook_setup->dimensions=get_bits(gb, 16);
-        if (codebook_setup->dimensions>16) {
-            av_log(vc->avccontext, AV_LOG_ERROR, " %"PRIdFAST16". Codebook's dimension is too large (%d). \n", cb, codebook_setup->dimensions);
+        if (codebook_setup->dimensions>16||codebook_setup->dimensions==0) {
+            av_log(vc->avccontext, AV_LOG_ERROR, " %"PRIdFAST16". Codebook's dimension is invalid (%d). \n", cb, codebook_setup->dimensions);
             goto error;
         }
         entries=get_bits(gb, 24);