indeo5: check tile size in decode_mb_info().
authorMichael Niedermayer <michaelni@gmx.at>
Sun, 15 Apr 2012 12:11:50 +0000 (14:11 +0200)
committerAnton Khirnov <anton@khirnov.net>
Sat, 29 Sep 2012 17:12:36 +0000 (19:12 +0200)
commit2d09cdbaf2f449ba23d54e97e94bd97ca22208c6
treec9c854ae67e0870631357bf8b50a862e92cf474e
parente4d4044339b9c3b0f45f7203cd026eda3c0414c0
indeo5: check tile size in decode_mb_info().

This prevents writing into a too small array if some parameters changed
without the tile being reallocated.

Fixes CVE-2012-2794

CC:libav-stable@libav.org

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Anton Khirnov <anton@khirnov.net>
libavcodec/indeo5.c