From: Michael Niedermayer <michaelni@gmx.at>
Date: Wed, 3 Jul 2013 09:55:45 +0000 (+0200)
Subject: Merge commit 'fbcc03db8f3919e2ea46d6ad11a00906b1c0ef0e'
X-Git-Url: https://git.sesse.net/?a=commitdiff_plain;h=3f0364327c32175221104799958702458be8fbd6;p=ffmpeg

Merge commit 'fbcc03db8f3919e2ea46d6ad11a00906b1c0ef0e'

* commit 'fbcc03db8f3919e2ea46d6ad11a00906b1c0ef0e':
  jpeg2000: Check code-block size

Conflicts:
	libavcodec/jpeg2000dec.c

Merged-by: Michael Niedermayer <michaelni@gmx.at>
---

3f0364327c32175221104799958702458be8fbd6
diff --cc libavcodec/jpeg2000dec.c
index 043ec03a2ed,8fbe3493eff..8e582aa2cf9
--- a/libavcodec/jpeg2000dec.c
+++ b/libavcodec/jpeg2000dec.c
@@@ -280,11 -264,11 +280,11 @@@ static int get_cox(Jpeg2000DecoderConte
      else
          c->nreslevels2decode = c->nreslevels - s->reduction_factor;
  
 -    c->log2_cblk_width  = bytestream_get_byte(&s->buf) + 2; // cblk width
 -    c->log2_cblk_height = bytestream_get_byte(&s->buf) + 2; // cblk height
 +    c->log2_cblk_width  = (bytestream2_get_byteu(&s->g) & 15) + 2; // cblk width
 +    c->log2_cblk_height = (bytestream2_get_byteu(&s->g) & 15) + 2; // cblk height
  
      if (c->log2_cblk_width > 10 || c->log2_cblk_height > 10 ||
-         c->log2_cblk_width + c->log2_cblk_height > 14) {
+         c->log2_cblk_width + c->log2_cblk_height > 12) {
          av_log(s->avctx, AV_LOG_ERROR, "cblk size invalid\n");
          return AVERROR_INVALIDDATA;
      }