Browse code

4xm: check if there are bits left in decode_i_block() Fixed Ticket753 Bug Found by: Diana Elena Muscalu

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Michael Niedermayer authored on 2011/12/15 06:20:39
Showing 1 changed files
... ...
@@ -459,6 +459,11 @@ static int decode_p_frame(FourXContext *f, const uint8_t *buf, int length){
459 459
 static int decode_i_block(FourXContext *f, DCTELEM *block){
460 460
     int code, i, j, level, val;
461 461
 
462
+    if(get_bits_left(&f->gb) < 2){
463
+        av_log(f->avctx, AV_LOG_ERROR, "%d bits left before decode_i_block()\n", get_bits_left(&f->gb));
464
+        return -1;
465
+    }
466
+
462 467
     /* DC coef */
463 468
     val = get_vlc2(&f->pre_gb, f->pre_vlc.table, ACDC_VLC_BITS, 3);
464 469
     if (val>>4){