mss2: only use error correction for matching block counts
authorAndreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
Thu, 24 Nov 2016 22:57:46 +0000 (23:57 +0100)
committerLuca Barbato <lu_zero@gentoo.org>
Tue, 29 Nov 2016 09:38:01 +0000 (10:38 +0100)
commit1762a39e09a3edc27d1ef7bc50070f496b893aa4
tree5d9909e913a26fad0b0c6b8f2cc172203fae7f6f
parentd0c84c41d33ffd270d5f9fe0290e08341397fdee
mss2: only use error correction for matching block counts

This fixes a heap-buffer-overflow in ff_er_frame_end when decoding mss2
with coded_width/coded_height larger than width/height.

Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
libavcodec/mss2.c