Re: [FFmpeg-devel] [PATCH] avcodec/webp: validate the distance prefix code

2015-03-02 Thread Michael Niedermayer
On Mon, Mar 02, 2015 at 08:58:45PM +0100, Andreas Cadhalpun wrote: > Hi, > > according to the WebP Lossless Bitstream Specification [1] the > highest allowed value for the prefix code is 39. Attached patch adds > a check for this to avoid crashes decoding broken files. > > Best regards, > Andreas

[FFmpeg-devel] [PATCH] avcodec/webp: validate the distance prefix code

2015-03-02 Thread Andreas Cadhalpun
Hi, according to the WebP Lossless Bitstream Specification [1] the highest allowed value for the prefix code is 39. Attached patch adds a check for this to avoid crashes decoding broken files. Best regards, Andreas 1: https://developers.google.com/speed/webp/docs/webp_lossless_bitstream_sp