- vp56_rac_gets(c, 8); /* number of displayed macroblock rows */
- vp56_rac_gets(c, 8); /* number of displayed macroblock cols */
+ render_y = vp56_rac_gets(c, 8); /* number of displayed macroblock rows */
+ render_x = vp56_rac_gets(c, 8); /* number of displayed macroblock cols */
+ if (render_x == 0 || render_x > cols ||
+ render_y == 0 || render_y > rows)
+ return AVERROR_INVALIDDATA;