if (flags & VB_HAS_GMC) {
i = (int16_t)bytestream2_get_le16(&c->stream);
j = (int16_t)bytestream2_get_le16(&c->stream);
+ if (FFABS(j) > avctx->height) {
+ av_log(avctx, AV_LOG_ERROR, "GMV out of range\n");
+ return AVERROR_INVALIDDATA;
+ }
offset = i + j * avctx->width;
}
if (flags & VB_HAS_VIDEO) {