From: Michael Niedermayer <michaelni@gmx.at>
Date: Wed, 12 Nov 2014 10:13:01 +0000 (+0100)
Subject: on2avc: Fix out of array access
X-Git-Tag: v11.4~70
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=dd195c2c587f44dbc4be7f059ed182f7d83e6cb4;p=platform%2Fupstream%2Flibav.git

on2avc: Fix out of array access

CC: libav-stable@libav.org
Bug-Id: CID 1206648
(cherry picked from commit 2fa6d21124bd2fc0b186290f5313179263bfcfb7)
Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
---

diff --git a/libavcodec/on2avc.c b/libavcodec/on2avc.c
index 1c4b3c9..c00339f 100644
--- a/libavcodec/on2avc.c
+++ b/libavcodec/on2avc.c
@@ -172,7 +172,7 @@ static int on2avc_decode_band_scales(On2AVCContext *c, GetBitContext *gb)
             } else {
                 scale += get_vlc2(gb, c->scale_diff.table, 9, 3) - 60;
             }
-            if (scale < 0 || scale > 128) {
+            if (scale < 0 || scale > 127) {
                 av_log(c->avctx, AV_LOG_ERROR, "Invalid scale value %d\n",
                        scale);
                 return AVERROR_INVALIDDATA;