check that csize in ff_lzw_decode_init is < LZW_MAXBITS, <= is not enough and

might read outside the prefix array

git-svn-id: file:///var/local/repositories/ffmpeg/trunk@14214 9553f0bf-9b14-0410-a0b8-cfaf0461ba5b

libavcodec/lzw.c

@@ -131,7 +131,7 @@ int ff_lzw_decode_init(LZWState *p, int csize, const uint8_t *buf, int buf_size,
 {
     struct LZWState *s = (struct LZWState *)p;
 
-    if(csize < 1 || csize > LZW_MAXBITS)
+    if(csize < 1 || csize >= LZW_MAXBITS)
         return -1;
     /* read buffer */
     s->pbuf = buf;