From 4af0262f7d531c33b00d7f9dbca808d9c62d6a84 Mon Sep 17 00:00:00 2001 From: Shitiz Garg Date: Fri, 16 Dec 2011 04:50:21 +0530 Subject: [PATCH] cljr: Check if width or height are positive integers width and height might get passed as 0 and would cause floating point exceptions in decode_frame. Fixes bugzilla #149 Signed-off-by: Michael Niedermayer --- libavcodec/cljr.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/libavcodec/cljr.c b/libavcodec/cljr.c index 7ae3e7eeeb..2b0142b979 100644 --- a/libavcodec/cljr.c +++ b/libavcodec/cljr.c @@ -61,6 +61,11 @@ static int decode_frame(AVCodecContext *avctx, if (p->data[0]) avctx->release_buffer(avctx, p); + if (avctx->height <= 0 || avctx->width <= 0) { + av_log(avctx, AV_LOG_ERROR, "Invalid width or height\n"); + return AVERROR_INVALIDDATA; + } + if (buf_size / avctx->height < avctx->width) { av_log(avctx, AV_LOG_ERROR, "Resolution larger than buffer size. Invalid header?\n");