Check for reference frames so RV 3/4 won't segfault trying to copy data from

nonexisting reference.



git-svn-id: file:///var/local/repositories/ffmpeg/trunk@22378 9553f0bf-9b14-0410-a0b8-cfaf0461ba5b

libavcodec/rv34.c

@@ -1452,8 +1452,12 @@ int ff_rv34_decode_frame(AVCodecContext *avctx,
         av_log(avctx, AV_LOG_ERROR, "First slice header is incorrect\n");
         return -1;
     }
+    if((!s->last_picture_ptr || !s->last_picture_ptr->data[0]) && si.type == FF_P_TYPE)
+        return -1;
     if((!s->last_picture_ptr || !s->last_picture_ptr->data[0]) && si.type == FF_B_TYPE)
         return -1;
+    if((!s->next_picture_ptr || !s->next_picture_ptr->data[0]) && si.type == FF_B_TYPE)
+        return -1;
     /* skip b frames if we are in a hurry */
     if(avctx->hurry_up && si.type==FF_B_TYPE) return buf_size;
     if(   (avctx->skip_frame >= AVDISCARD_NONREF && si.type==FF_B_TYPE)