golomb: avoid infinite loop on all-zero input (or end of buffer).
diff mbox

Message ID 20120216163616.7B7255DECF@aruru.libav.org
State New
Headers show

Commit Message

Janne Grunau Feb. 16, 2012, 4:36 p.m. 
Module: libav
Branch: master
Commit: c6643fddba73560f26f90d327c84d8832222a720

Author:    Ronald S. Bultje <rsbultje@gmail.com>
Committer: Ronald S. Bultje <rsbultje@gmail.com>
Date:      Tue Feb 14 11:50:57 2012 -0800

golomb: avoid infinite loop on all-zero input (or end of buffer).

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org

---

 libavcodec/golomb.h |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)

Patch
diff mbox 

diff --git a/libavcodec/golomb.h b/libavcodec/golomb.h
index 503aa14..e19064c 100644
--- a/libavcodec/golomb.h
+++ b/libavcodec/golomb.h
@@ -123,7 +123,7 @@  static inline int svq3_get_ue_golomb(GetBitContext *gb){
     }else{
         int ret = 1;
 
-        while (1) {
+        do {
             buf >>= 32 - 8;
             LAST_SKIP_BITS(re, gb, FFMIN(ff_interleaved_golomb_vlc_len[buf], 8));
 
@@ -135,7 +135,7 @@  static inline int svq3_get_ue_golomb(GetBitContext *gb){
             ret = (ret << 4) | ff_interleaved_dirac_golomb_vlc_code[buf];
             UPDATE_CACHE(re, gb);
             buf = GET_CACHE(re, gb);
-        }
+        } while (ret);
 
         CLOSE_READER(re, gb);
         return ret - 1;