From be376528e03c17ccac445bf5f4093d466b824d86 Mon Sep 17 00:00:00 2001
From: Nedeljko Babic <nbabic@mips.com>
Date: Wed, 28 Mar 2012 12:29:53 +0200
Subject: Tremor mainline fix commit for Moz BZ #719612

[Import changes from Tremor (3daa274 2012-01-20)]
---
 floor1.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/floor1.c b/floor1.c
index fe4de84..33c2602 100644
--- a/floor1.c
+++ b/floor1.c
@@ -137,6 +137,7 @@ vorbis_info_floor *floor1_info_unpack (vorbis_info *vi,oggpack_buffer *opb){
   count=0;
   for(j=0,k=0;j<info->partitions;j++){
     count+=info->class[(int)info->partitionclass[j]].class_dim;
+    if(count>VIF_POSIT)goto err_out;
     for(;k<count;k++){
       int t=info->postlist[k+2]=(ogg_uint16_t)oggpack_read(opb,rangebits);
       if(t>=(1<<rangebits))goto err_out;
-- 
cgit v1.2.1