Martin Storsjö d4c2a3740f xmv: Add more sanity checks for parameters read from the bitstream ...

Since the number of channels is multiplied by 36 and assigned to
to a uint16_t, make sure this calculation didn't overflow. (In
certain cases the calculation could overflow leaving the
truncated block_align at 0, leading to divisions by zero later.)

Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
Signed-off-by: Martin Storsjö <martin@martin.st>

2013-09-17 20:09:25 +03:00

16 KiB

Raw Blame History

View Raw