pictordec: break out of both decoding loops when y drops below 0
authorAnton Khirnov <anton@khirnov.net>
Sat, 24 Aug 2013 19:30:46 +0000 (21:30 +0200)
committerAnton Khirnov <anton@khirnov.net>
Mon, 2 Sep 2013 17:27:45 +0000 (19:27 +0200)
commit5f7aecde02a95451e514c809f2794c1deba80695
tree64a64710d4e29f8ab6eea24666ec18299a4d79c5
parent8aba7968dd604aae91ee42cbce0be3dad7dceb30
pictordec: break out of both decoding loops when y drops below 0

Otherwise picmemset can get called with negative y, resulting in an
invalid write.

Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
libavcodec/pictordec.c