X-Git-Url: https://git.sesse.net/?a=blobdiff_plain;f=libavcodec%2Fituh263dec.c;h=5e3c0eac0739d44a3df84f99b7cd1c57c5d50589;hb=25e35b34365ea4fc737f406992b7947a0610edcb;hp=a26244f3931450beeaee702fd4669ec1419fb69e;hpb=5a45f4d2b74b93997c28a3238b8f55fa628158b5;p=ffmpeg

diff --git a/libavcodec/ituh263dec.c b/libavcodec/ituh263dec.c
index a26244f3931..5e3c0eac073 100644
--- a/libavcodec/ituh263dec.c
+++ b/libavcodec/ituh263dec.c
@@ -167,6 +167,7 @@ static int h263_decode_gob_header(MpegEncContext *s)
         /* We have a GBSC probably with GSTUFF */
     skip_bits(&s->gb, 16); /* Drop the zeros */
     left= get_bits_left(&s->gb);
+    left = FFMIN(left, 32);
     //MN: we must check the bits left or we might end in an infinite loop (or segfault)
     for(;left>13; left--){
         if(get_bits1(&s->gb)) break; /* Seek the '1' bit */