qpeg: Add checks for running out of rows in qpeg_decode_inter

Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
Signed-off-by: Martin Storsjö <martin@martin.st>
This commit is contained in:
Martin Storsjö 2013-09-19 15:53:31 +03:00
parent e9d61de96c
commit 7a5a557227

View File

@ -191,6 +191,8 @@ static void qpeg_decode_inter(QpegContext *qctx, uint8_t *dst,
filled = 0; filled = 0;
dst -= stride; dst -= stride;
height--; height--;
if (height < 0)
break;
} }
} }
} else if(code >= 0xC0) { /* copy code: 0xC0..0xDF */ } else if(code >= 0xC0) { /* copy code: 0xC0..0xDF */
@ -202,6 +204,8 @@ static void qpeg_decode_inter(QpegContext *qctx, uint8_t *dst,
filled = 0; filled = 0;
dst -= stride; dst -= stride;
height--; height--;
if (height < 0)
break;
} }
} }
} else if(code >= 0x80) { /* skip code: 0x80..0xBF */ } else if(code >= 0x80) { /* skip code: 0x80..0xBF */