Message ID | 1510107883-29628-1-git-send-email-gseanmcg@gmail.com |
---|---|
State | New |
Headers | show |
diff --git a/libavcodec/smacker.c b/libavcodec/smacker.c index 0e057a1..e829405 100644 --- a/libavcodec/smacker.c +++ b/libavcodec/smacker.c @@ -97,6 +97,11 @@ enum SmkBlockTypes { static int smacker_decode_tree(BitstreamContext *bc, HuffContext *hc, uint32_t prefix, int length) { + if(length > 32) { + av_log(NULL, AV_LOG_ERROR, "length too long\n"); + return AVERROR_INVALIDDATA; + } + if (!bitstream_read_bit(bc)) { // Leaf if(hc->current >= 256){ av_log(NULL, AV_LOG_ERROR, "Tree size exceeded!\n");