[FFmpeg-cvslog] j2kdec: check colorspace ncomponents

Paul B Mahol git at videolan.org
Fri Jun 15 20:39:24 CEST 2012


ffmpeg | branch: master | Paul B Mahol <onemda at gmail.com> | Fri Jun 15 11:46:12 2012 +0000| [29e9f83192fd366f83a314adfb7892381c2280f5] | committer: Paul B Mahol

j2kdec: check colorspace ncomponents

This prevents out of array read.

Signed-off-by: Paul B Mahol <onemda at gmail.com>

> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=29e9f83192fd366f83a314adfb7892381c2280f5
---

 libavcodec/j2kdec.c |    4 ++++
 1 file changed, 4 insertions(+)

diff --git a/libavcodec/j2kdec.c b/libavcodec/j2kdec.c
index 9c2022e..59c2188 100644
--- a/libavcodec/j2kdec.c
+++ b/libavcodec/j2kdec.c
@@ -217,6 +217,10 @@ static int get_siz(J2kDecoderContext *s)
      s->tile_offset_y = bytestream2_get_be32u(&s->g); // YT0Siz
        s->ncomponents = bytestream2_get_be16u(&s->g); // CSiz
 
+    if(s->ncomponents <= 0 || s->ncomponents > 4) {
+        av_log(s->avctx, AV_LOG_ERROR, "unsupported/invalid ncomponents: %d\n", s->ncomponents);
+        return AVERROR(EINVAL);
+    }
     if(s->tile_width<=0 || s->tile_height<=0)
         return AVERROR(EINVAL);
 



More information about the ffmpeg-cvslog mailing list