Make sure we only parse max amount of subpackets (5) in the cook decoder.

git-svn-id: file:///var/local/repositories/ffmpeg/trunk@18689 9553f0bf-9b14-0410-a0b8-cfaf0461ba5b

diff --git a/libavcodec/cook.c b/libavcodec/cook.c
index 8a909df0a68c31b27b0491d1da5d3b76c897315f..99d1bdb8c62e15306191a795a8aff836b65256f8 100644 (file)
--- a/libavcodec/cook.c
+++ b/libavcodec/cook.c
@@ -1219,6 +1219,10 @@ static av_cold int cook_decode_init(AVCodecContext *avctx)
 
         q->num_subpackets++;
         s++;
+        if (s > MAX_SUBPACKETS) {
+            av_log(avctx,AV_LOG_ERROR,"Too many subpackets > 5, report file!\n");
+            return -1;
+        }
     }
     /* Generate tables */
     init_pow2table();