From: Michael Niedermayer <michaelni@gmx.at>
Date: Mon, 19 Nov 2007 20:14:46 +0000 (+0000)
Subject: check region depth for validity
X-Git-Tag: v0.5~6917
X-Git-Url: http://git.osdn.net/view?a=commitdiff_plain;h=2867ed9b1c0561b0e50d9c4f73e09621333e2f1f;p=coroid%2Flibav_saccubus.git

check region depth for validity
(32/64/128 would crash at least due to 1<<depth allocation later,
and no i do not have a sample file)

Originally committed as revision 11062 to svn://svn.ffmpeg.org/ffmpeg/trunk
---

diff --git a/libavcodec/dvbsubdec.c b/libavcodec/dvbsubdec.c
index b410a24b2..b51603f30 100644
--- a/libavcodec/dvbsubdec.c
+++ b/libavcodec/dvbsubdec.c
@@ -1035,6 +1035,10 @@ static void dvbsub_parse_region_segment(AVCodecContext *avctx,
     }
 
     region->depth = 1 << (((*buf++) >> 2) & 7);
+    if(region->depth<2 || region->depth>8){
+        av_log(avctx, AV_LOG_ERROR, "region depth %d is invalid\n", region->depth);
+        region->depth= 4;
+    }
     region->clut = *buf++;
 
     if (region->depth == 8)