From 6998af4a40e67b5f0bfb769b7749f38a92eb2819 Mon Sep 17 00:00:00 2001
From: Michael Niedermayer <michaelni@gmx.at>
Date: Thu, 18 Apr 2013 02:52:41 +0200
Subject: avcodec/bitstream: check codes in ff_init_vlc_sparse()

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
---
 libavcodec/bitstream.c | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'libavcodec')

diff --git a/libavcodec/bitstream.c b/libavcodec/bitstream.c
index 6598d3e..2dda9bb 100644
--- a/libavcodec/bitstream.c
+++ b/libavcodec/bitstream.c
@@ -310,6 +310,10 @@ int ff_init_vlc_sparse(VLC *vlc, int nb_bits, int nb_codes,
             return -1;\
         }\
         GET_DATA(buf[j].code, codes, i, codes_wrap, codes_size);\
+        if (buf[j].code >= (1LL<<buf[j].bits)) {\
+            av_log(NULL, AV_LOG_ERROR, "Invalid code in init_vlc\n");\
+            return -1;\
+        }\
         if (flags & INIT_VLC_LE)\
             buf[j].code = bitswap_32(buf[j].code);\
         else\
-- 
cgit v1.1