Signed-off-by: Paul B Mahol <[email protected]>
---
libavcodec/dpx.c | 3 +++
1 file changed, 3 insertions(+)
diff --git a/libavcodec/dpx.c b/libavcodec/dpx.c
index 5372e3d586..68a2762017 100644
--- a/libavcodec/dpx.c
+++ b/libavcodec/dpx.c
@@ -606,6 +606,9 @@ static int decode_frame(AVCodecContext *avctx,
ff_set_sar(avctx, avctx->sample_aspect_ratio);
+ if (buf_size - offset < (((uint64_t)elements * avctx->width *
avctx->height * bits_per_color) >> 3))
+ return AVERROR_INVALIDDATA;
+
if ((ret = ff_get_buffer(avctx, p, 0)) < 0)
return ret;
--
2.17.1
_______________________________________________
ffmpeg-devel mailing list
[email protected]
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel
To unsubscribe, visit link above, or email
[email protected] with subject "unsubscribe".
