X-Git-Url: https://git.piment-noir.org/?p=deb_ffmpeg.git;a=blobdiff_plain;f=ffmpeg%2Flibavcodec%2Fvmdvideo.c;h=a2ba1c959b000e9061e2a8cec466ea68a2ddcfee;hp=fa0fbe32d4ac37ca5f4ec8a9c3c47548c5d1a3bb;hb=092a91210f1b986dc846dc52988518f8f913eb72;hpb=dcebb6f35d810c9009a455808b016c790bb633b4

diff --git a/ffmpeg/libavcodec/vmdvideo.c b/ffmpeg/libavcodec/vmdvideo.c
index fa0fbe3..a2ba1c9 100644
--- a/ffmpeg/libavcodec/vmdvideo.c
+++ b/ffmpeg/libavcodec/vmdvideo.c
@@ -339,6 +339,9 @@ static int vmd_decode(VmdVideoContext *s, AVFrame *frame)
                         ofs += slen;
                         bytestream2_skip(&gb, len);
                     } else {
+                        if (ofs + len > frame_width ||
+                            bytestream2_get_bytes_left(&gb) < len)
+                            return AVERROR_INVALIDDATA;
                         bytestream2_get_buffer(&gb, &dp[ofs], len);
                         ofs += len;
                     }