indeo5: prevent null pointer dereference on broken files

Found by John Villamil <johnv@matasano.com>
This commit is contained in:
Janne Grunau 2012-01-23 21:33:34 +01:00
parent 7072a6a4bb
commit 366ac22ea5
1 changed files with 4 additions and 0 deletions

View File

@ -453,6 +453,10 @@ static int decode_mb_info(IVI5DecContext *ctx, IVIBandDesc *band,
ref_mb = tile->ref_mbs;
offs = tile->ypos * band->pitch + tile->xpos;
if (!ref_mb &&
((band->qdelta_present && band->inherit_qdelta) || band->inherit_mv))
return AVERROR_INVALIDDATA;
/* scale factor for motion vectors */
mv_scale = (ctx->planes[0].bands[0].mb_size >> 3) - (band->mb_size >> 3);
mv_x = mv_y = 0;