indeo3: Fix overreading requant_tab.
authorMichael Niedermayer <michaelni@gmx.at>
Sun, 4 Mar 2012 22:12:58 +0000 (23:12 +0100)
committerMichael Niedermayer <michaelni@gmx.at>
Sun, 4 Mar 2012 22:13:26 +0000 (23:13 +0100)
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
libavcodec/indeo3.c

index 54389a1..a87252a 100644 (file)
@@ -622,7 +622,7 @@ static int decode_cell(Indeo3DecodeContext *ctx, AVCodecContext *avctx,
     /* of the predicted cell in order to avoid overflows. */
     if (vq_index >= 8 && ref_block) {
         for (x = 0; x < cell->width << 2; x++)
-            ref_block[x] = requant_tab[vq_index & 7][ref_block[x]];
+            ref_block[x] = requant_tab[vq_index & 7][ref_block[x] & 127];
     }
 
     error = IV3_NOERR;