Tremor mainline fix commit for Moz BZ #719612

git-svn-id: https://svn.xiph.org/trunk/Tremor@18152 0101bb08-14d6-0310-b084-bc0e0c8e3800

1 files changed, 1 insertions, 0 deletions

diff --git a/floor1.c b/floor1.c
index a013552..e63ae9f 100644
--- a/floor1.c
+++ b/floor1.c
@@ -108,6 +108,7 @@ static vorbis_info_floor *floor1_unpack (vorbis_info *vi,oggpack_buffer *opb){
 
   for(j=0,k=0;j<info->partitions;j++){
     count+=info->class_dim[info->partitionclass[j]]; 
+    if(count>VIF_POSIT)goto err_out;
     for(;k<count;k++){
       int t=info->postlist[k+2]=oggpack_read(opb,rangebits);
       if(t<0 || t>=(1<<rangebits))