X-Git-Url: https://git.sesse.net/?a=blobdiff_plain;f=libavcodec%2Fsga.c;h=5103d01f8553c1c6e04f71e323a3a488f9ec18a4;hb=ffeeff4fbccbf9c9269ac24fe56285b224426141;hp=00752a584376f351e61765dbe1fa29c1d75f77aa;hpb=6b43e1a86c7c356be7b8fc553fa8721e502290e2;p=ffmpeg

diff --git a/libavcodec/sga.c b/libavcodec/sga.c
index 00752a58437..5103d01f855 100644
--- a/libavcodec/sga.c
+++ b/libavcodec/sga.c
@@ -232,7 +232,7 @@ static int lzss_decompress(AVCodecContext *avctx,
 
                 if (offset <= 0)
                     offset = 1;
-                if (oi < offset)
+                if (oi < offset || oi + count * 2 > dst_size)
                     return AVERROR_INVALIDDATA;
                 for (int j = 0; j < count * 2; j++) {
                     dst[oi] = dst[oi - offset];
@@ -520,7 +520,7 @@ static av_cold int sga_decode_end(AVCodecContext *avctx)
     return 0;
 }
 
-AVCodec ff_sga_decoder = {
+const AVCodec ff_sga_decoder = {
     .name           = "sga",
     .long_name      = NULL_IF_CONFIG_SMALL("Digital Pictures SGA Video"),
     .type           = AVMEDIA_TYPE_VIDEO,