mirror of https://code.videolan.org/videolan/dav1d
Add a SIZE_MAX/2 validation check in dav1d_parse_sequence_header()
This commit is contained in:
parent
77d0cbaf0e
commit
682fb1ba14
|
@ -304,7 +304,7 @@ int dav1d_parse_sequence_header(Dav1dSequenceHeader *const out,
|
||||||
{
|
{
|
||||||
validate_input_or_ret(out != NULL, DAV1D_ERR(EINVAL));
|
validate_input_or_ret(out != NULL, DAV1D_ERR(EINVAL));
|
||||||
validate_input_or_ret(ptr != NULL, DAV1D_ERR(EINVAL));
|
validate_input_or_ret(ptr != NULL, DAV1D_ERR(EINVAL));
|
||||||
validate_input_or_ret(sz > 0, DAV1D_ERR(EINVAL));
|
validate_input_or_ret(sz > 0 && sz <= SIZE_MAX / 2, DAV1D_ERR(EINVAL));
|
||||||
|
|
||||||
GetBits gb;
|
GetBits gb;
|
||||||
dav1d_init_get_bits(&gb, ptr, sz);
|
dav1d_init_get_bits(&gb, ptr, sz);
|
||||||
|
|
Loading…
Reference in New Issue