Avoid integer overflow. Patch by Drew Yao.

9cc8c304 · Christophe Mutricy · Rafaël Carré · e6e22cae · 9cc8c304
Commit 9cc8c304 authored Mar 10, 2008 by Christophe Mutricy Committed by Rafaël Carré Mar 23, 2008
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 1 deletion

modules/codec/cinepak.c modules/codec/cinepak.c +2 -1

No files found.
--- a/modules/codec/cinepak.c
+++ b/modules/codec/cinepak.c
@@ -396,7 +396,8 @@ static int cinepak_decode_frame( cinepak_context_t *p_context,
    i_height = GET2BYTES( p_data );
    i_frame_strips = GET2BYTES( p_data );

-    if( !i_frame_size || !i_width || !i_height )
+    if( !i_frame_size || !i_width || !i_height ||
+        i_width > 0xffff-3 || i_height > 0xffff-3)
    {
        /* Broken header */
        return( -1 );