Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc>
---
libavformat/avienc.c | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/libavformat/avienc.c b/libavformat/avienc.c
index 2264241d57..14115b3e2b 100644
--- a/libavformat/avienc.c
+++ b/libavformat/avienc.c
@@ -426,6 +426,10 @@ static int avi_write_header(AVFormatContext *s)
avio_wl32(pb, -1); /* quality */
avio_wl32(pb, au_ssize); /* sample size */
avio_wl32(pb, 0);
+ if (par->width > 65535 || par->height > 65535) {
+ av_log(s, AV_LOG_ERROR, "%dx%d dimensions are too big\n",
par->width, par->height);
+ return AVERROR(EINVAL);
+ }
avio_wl16(pb, par->width);
avio_wl16(pb, par->height);
ff_end_tag(pb, strh);
--
2.17.1
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel
To unsubscribe, visit link above, or email
ffmpeg-devel-requ...@ffmpeg.org with subject "unsubscribe".
