From: Xingwen Fang <f...@rock-chips.com>
When the block size is illegal, we don't need to read the
block data. Otherwise, there will be abnormal memory access
in dsp.mlp_filter_channel.
Signed-off-by: Xingwen Fang <f...@rock-chips.com>
---
libavcodec/mlpdec.c | 5 +++++
1 file changed, 5 insertions(+)
diff --git a/libavcodec/mlpdec.c b/libavcodec/mlpdec.c
index 39c4091..198d3c0 100644
--- a/libavcodec/mlpdec.c
+++ b/libavcodec/mlpdec.c
@@ -1263,6 +1263,11 @@ static int read_access_unit(AVCodecContext *avctx, void*
data,
if (!s->restart_seen)
goto next_substr;
+ if (s->blocksize < 8) {
+ av_log(m->avctx, AV_LOG_ERROR, "Block size is too small.\n");
+ goto next_substr;
+ }
+
if ((ret = read_block_data(m, &gb, substr)) < 0)
return ret;
--
2.7.4
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel
To unsubscribe, visit link above, or email
ffmpeg-devel-requ...@ffmpeg.org with subject "unsubscribe".
