From 925c37874b617816b6f460c6f229c18b46548b46 Mon Sep 17 00:00:00 2001 From: Luca Barbato Date: Fri, 2 May 2014 00:18:04 +0200 Subject: [PATCH] vp9: Read the frame size as unsigned Sample-Id: 00001723-google Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org --- libavcodec/vp9.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/libavcodec/vp9.c b/libavcodec/vp9.c index c04a3b8..2a6a138 100644 --- a/libavcodec/vp9.c +++ b/libavcodec/vp9.c @@ -1198,7 +1198,7 @@ static int vp9_decode_packet(AVCodecContext *avctx, void *frame, const uint8_t *idx = data + size + 1 - idx_sz; while (n_frames--) { - int sz = AV_RL32(idx); + unsigned sz = AV_RL32(idx); if (nbytes < 4) sz &= (1 << (8 * nbytes)) - 1; @@ -1206,7 +1206,7 @@ static int vp9_decode_packet(AVCodecContext *avctx, void *frame, if (sz > size) { av_log(avctx, AV_LOG_ERROR, - "Superframe packet size too big: %d > %d\n", + "Superframe packet size too big: %u > %d\n", sz, size); return AVERROR_INVALIDDATA; } -- 2.7.4