diff --git a/libavcodec/pixlet.c b/libavcodec/pixlet.c index e78b66635939b707ec0587583b41fb2d7c6009d7..0f13b5bac979e1c984b8fbb7488a7f5e7139f8a1 100644 --- a/libavcodec/pixlet.c +++ b/libavcodec/pixlet.c @@ -504,8 +504,14 @@ static int decode_plane(AVCodecContext *avctx, int plane, AVPacket *avpkt, AVFra int i, ret; for (i = ctx->levels - 1; i >= 0; i--) { - ctx->scaling[plane][H][i] = 1000000.0f / sign_extend(bytestream2_get_be32(&ctx->gb), 32); - ctx->scaling[plane][V][i] = 1000000.0f / sign_extend(bytestream2_get_be32(&ctx->gb), 32); + int32_t h = sign_extend(bytestream2_get_be32(&ctx->gb), 32); + int32_t v = sign_extend(bytestream2_get_be32(&ctx->gb), 32); + + if (!h || !v) + return AVERROR_INVALIDDATA; + + ctx->scaling[plane][H][i] = 1000000.0f / h; + ctx->scaling[plane][V][i] = 1000000.0f / v; } bytestream2_skip(&ctx->gb, 4);