Thoroughly check all fields set by the application in xvmc struct.
authorIvan Kalvachev <ikalvachev@gmail.com>
Mon, 16 Feb 2009 22:46:30 +0000 (22:46 +0000)
committerIvan Kalvachev <ikalvachev@gmail.com>
Mon, 16 Feb 2009 22:46:30 +0000 (22:46 +0000)
Originally committed as revision 17387 to svn://svn.ffmpeg.org/ffmpeg/trunk

libavcodec/mpegvideo_xvmc.c

index 3d56bec..ade7273 100644 (file)
@@ -90,7 +90,11 @@ int ff_xvmc_field_start(MpegEncContext *s, AVCodecContext *avctx)
         return -1;
     }
     if (render->allocated_mv_blocks   < 1 ||
-        render->allocated_data_blocks < mb_block_count) {
+        render->allocated_data_blocks <  render->allocated_mv_blocks*mb_block_count ||
+        render->start_mv_blocks_num   >= render->allocated_mv_blocks                ||
+        render->next_free_data_block_num >
+                        render->allocated_data_blocks -
+                        mb_block_count*(render->allocated_mv_blocks-render->start_mv_blocks_num)) {
         av_log(avctx, AV_LOG_ERROR,
                "Rendering surface doesn't provide enough block structures to work with.\n");
         return -1;