Fix a potential out of array writing.

Patch by Mathieu Malaterre mathieu malaterre gmail com

git-svn-id: file:///var/local/repositories/ffmpeg/trunk@14487 9553f0bf-9b14-0410-a0b8-cfaf0461ba5b

diff --git a/libavcodec/rle.c b/libavcodec/rle.c
index 802f7f34a51aefffe5daa07ddf9c584a308465df..6e468f8991e00b49d67dda7a8366b9a266f28dbe 100644 (file)
--- a/libavcodec/rle.c
+++ b/libavcodec/rle.c
@@ -70,9 +70,9 @@ int ff_rle_encode(uint8_t *outbuf, int out_size, const uint8_t *ptr , int bpp, i
         } else {
             /* fall back on uncompressed */
             count = count_pixels(ptr, w-x, bpp, 0);
+            if(out + bpp*count >= outbuf + out_size) return -1;
             *out++ = (count ^ xor_raw) + add_raw;
 
-            if(out + bpp*count > outbuf + out_size) return -1;
             memcpy(out, ptr, bpp * count);
             out += bpp * count;
         }