Browse code

mpeg4videodec: only allow a positive length

Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Andreas Cadhalpun authored on 2015/04/22 23:32:42
Showing 1 changed files
... ...
@@ -189,14 +189,14 @@ static int mpeg4_decode_sprite_trajectory(Mpeg4DecContext *ctx, GetBitContext *g
189 189
         int x = 0, y = 0;
190 190
 
191 191
         length = get_vlc2(gb, sprite_trajectory.table, SPRITE_TRAJ_VLC_BITS, 3);
192
-        if (length)
192
+        if (length > 0)
193 193
             x = get_xbits(gb, length);
194 194
 
195 195
         if (!(ctx->divx_version == 500 && ctx->divx_build == 413))
196 196
             check_marker(gb, "before sprite_trajectory");
197 197
 
198 198
         length = get_vlc2(gb, sprite_trajectory.table, SPRITE_TRAJ_VLC_BITS, 3);
199
-        if (length)
199
+        if (length > 0)
200 200
             y = get_xbits(gb, length);
201 201
 
202 202
         check_marker(gb, "after sprite_trajectory");