From ec32cfd2ccb66bf3202a98098d91f3077f2a3a45 Mon Sep 17 00:00:00 2001
From: Benjamin Larsson <banan@ludd.ltu.se>
Date: Sat, 25 Apr 2009 17:46:27 +0000
Subject: [PATCH] Make sure we only parse max amount of subpackets (5) in the
 cook decoder.

Originally committed as revision 18689 to svn://svn.ffmpeg.org/ffmpeg/trunk
---
 libavcodec/cook.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/libavcodec/cook.c b/libavcodec/cook.c
index 8a909df0a..99d1bdb8c 100644
--- a/libavcodec/cook.c
+++ b/libavcodec/cook.c
@@ -1219,6 +1219,10 @@ static av_cold int cook_decode_init(AVCodecContext *avctx)
 
         q->num_subpackets++;
         s++;
+        if (s > MAX_SUBPACKETS) {
+            av_log(avctx,AV_LOG_ERROR,"Too many subpackets > 5, report file!\n");
+            return -1;
+        }
     }
     /* Generate tables */
     init_pow2table();
-- 
2.11.0