From: Michael Niedermayer <michaelni@gmx.at>
Date: Tue, 14 Aug 2012 23:57:45 +0000 (+0200)
Subject: pafdec: fix wrong palette index check.
X-Git-Tag: android-x86-4.4-r1~10071
X-Git-Url: http://git.osdn.net/view?a=commitdiff_plain;h=456f0c6477925611f1b45a434795f8bad4fb2a66;p=android-x86%2Fexternal-ffmpeg.git

pafdec: fix wrong palette index check.

Fixes Ticket1641

Found-by: Piotr Bandurski <ami_stuff@o2.pl>
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
---

diff --git a/libavcodec/paf.c b/libavcodec/paf.c
index 1c3e8b8fcd..388e2a082c 100644
--- a/libavcodec/paf.c
+++ b/libavcodec/paf.c
@@ -276,7 +276,7 @@ static int paf_vid_decode(AVCodecContext *avctx, void *data,
         index = bytestream2_get_byte(&c->gb);
         count = bytestream2_get_byte(&c->gb) + 1;
 
-        if (index + count > AVPALETTE_SIZE)
+        if (index + count > 256)
             return AVERROR_INVALIDDATA;
         if (bytestream2_get_bytes_left(&c->gb) < 3 * AVPALETTE_SIZE)
             return AVERROR_INVALIDDATA;