avcodec/flvdec: make while get_bits loop more robust by checking bits left

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

diff --git a/libavcodec/flvdec.c b/libavcodec/flvdec.c
index 3e55aaf8c1d70e49b55ebd55753fcf9bfcf699bb..af60dad9d5deaac1ba713a585337137a5e00fdb1 100644 (file)
--- a/libavcodec/flvdec.c
+++ b/libavcodec/flvdec.c
@@ -104,6 +104,8 @@ int ff_flv_decode_picture_header(MpegEncContext *s)
     /* PEI */
     while (get_bits1(&s->gb) != 0) {
         skip_bits(&s->gb, 8);
+        if (get_bits_left(&s->gb) <= 0)
+            return AVERROR_INVALIDDATA;
     }
     s->f_code = 1;