webp: fix infinite loop in webp_decode_frame
authorAndreas Cadhalpun <andreas.cadhalpun@googlemail.com>
Thu, 2 Jul 2015 21:45:46 +0000 (23:45 +0200)
committerMichael Niedermayer <michaelni@gmx.at>
Fri, 3 Jul 2015 02:06:19 +0000 (04:06 +0200)
commit0762152f7af6cd93bc8f504d5503723500c3f369
treee71bbaa173192593a566c4f76802f858fe82f7f2
parent30ffbeb04abde7bcf2ec01566f56dc187a87cad3
webp: fix infinite loop in webp_decode_frame

The loop always needs at least 8 bytes for chunk_type and chunk_size.
If fewer are left, bytestream2_get_le32 just returns 0 without
reading any bytes, leading to an infinite loop.

Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
libavcodec/webp.c