static int parse_mb_skip(Wmv2Context *w)
{
int mb_x, mb_y;
+ int coded_mb_count = 0;
MpegEncContext *const s = &w->s;
uint32_t *const mb_type = s->current_picture_ptr->mb_type;
}
break;
}
+
+ for (mb_y = 0; mb_y < s->mb_height; mb_y++)
+ for (mb_x = 0; mb_x < s->mb_width; mb_x++)
+ coded_mb_count += !IS_SKIP(mb_type[mb_y * s->mb_stride + mb_x]);
+
+ if (coded_mb_count > get_bits_left(&s->gb))
+ return AVERROR_INVALIDDATA;
+
return 0;
}
s->rl_chroma_table_index = s->rl_table_index;
}
+ if (get_bits_left(&s->gb) < 2)
+ return AVERROR_INVALIDDATA;
+
s->dc_table_index = get_bits1(&s->gb);
s->mv_table_index = get_bits1(&s->gb);
.close = wmv2_decode_end,
.decode = ff_h263_decode_frame,
.capabilities = AV_CODEC_CAP_DRAW_HORIZ_BAND | AV_CODEC_CAP_DR1,
+ .caps_internal = FF_CODEC_CAP_INIT_CLEANUP,
.pix_fmts = (const enum AVPixelFormat[]) { AV_PIX_FMT_YUV420P,
AV_PIX_FMT_NONE },
};