--- decoder.c	2004/08/10 21:58:55	1.65
+++ decoder.c	2004/08/15 11:28:38	1.66
@@ -20,7 +20,7 @@
  *  along with this program ; if not, write to the Free Software
  *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307 USA
  *
- * $Id: decoder.c,v 1.65 2004/08/10 21:58:55 edgomez Exp $
+ * $Id: decoder.c,v 1.66 2004/08/15 11:28:38 syskin Exp $
  *
  ****************************************************************************/
 
@@ -465,6 +465,42 @@
 	}
 }
 
+static void
+validate_vector(VECTOR * mv, unsigned int x_pos, unsigned int y_pos, const DECODER * dec)
+{
+	/* clip a vector to valid range 
+	   prevents crashes if bitstream is broken 
+	*/
+	int i;
+
+	for (i = 0; i < 4; i++) {
+		
+		int border = (int)(dec->mb_width - x_pos) << (5 + dec->quarterpel);
+		if (mv[i].x > border) {
+			DPRINTF(XVID_DEBUG_MV, "mv.x > max -- %d > %d, MB %d, %d", mv[i].x, border, x_pos, y_pos);
+			mv[i].x = border;
+		} else {
+			border = (-(int)x_pos-1) << (5 + dec->quarterpel);
+			if (mv[i].x < border) {
+				DPRINTF(XVID_DEBUG_MV, "mv.x < min -- %d < %d, MB %d, %d", mv[i].x, border, x_pos, y_pos);
+				mv[i].x = border;
+			}
+		}
+
+		border = (int)(dec->mb_height - y_pos) << (5 + dec->quarterpel);
+		if (mv[i].y >  border) {
+			DPRINTF(XVID_DEBUG_MV, "mv.y > max -- %d > %d, MB %d, %d", mv[i].y, border, x_pos, y_pos);
+			mv[i].y = border;
+		} else {
+			border = (-(int)y_pos-1) << (5 + dec->quarterpel);
+			if (mv[i].y < border) {
+				DPRINTF(XVID_DEBUG_MV, "mv.y < min -- %d < %d, MB %d, %d", mv[i].y, border, x_pos, y_pos);
+				mv[i].y = border;
+			}
+		}
+	}
+}
+
 /* decode an inter macroblock */
 static void
 decoder_mbinter(DECODER * dec,
@@ -502,32 +538,7 @@
 			mv[i] = pMB->mvs[i];
 	}
 
-	for (i = 0; i < 4; i++) {
-		/* clip to valid range */
-		int border = (int)(dec->mb_width - x_pos) << (5 + dec->quarterpel);
-		if (mv[i].x > border) {
-			DPRINTF(XVID_DEBUG_MV, "mv.x > max -- %d > %d, MB %d, %d", mv[i].x, border, x_pos, y_pos);
-			mv[i].x = border;
-		} else {
-			border = (-(int)x_pos-1) << (5 + dec->quarterpel);
-			if (mv[i].x < border) {
-				DPRINTF(XVID_DEBUG_MV, "mv.x < min -- %d < %d, MB %d, %d", mv[i].x, border, x_pos, y_pos);
-				mv[i].x = border;
-			}
-		}
-
-		border = (int)(dec->mb_height - y_pos) << (5 + dec->quarterpel);
-		if (mv[i].y >  border) {
-			DPRINTF(XVID_DEBUG_MV, "mv.y > max -- %d > %d, MB %d, %d", mv[i].y, border, x_pos, y_pos);
-			mv[i].y = border;
-		} else {
-			border = (-(int)y_pos-1) << (5 + dec->quarterpel);
-			if (mv[i].y < border) {
-				DPRINTF(XVID_DEBUG_MV, "mv.y < min -- %d < %d, MB %d, %d", mv[i].y, border, x_pos, y_pos);
-				mv[i].y = border;
-			}
-		}
-	}
+	validate_vector(mv, x_pos, y_pos, dec);
 
 	start_timer();
 
@@ -1017,7 +1028,7 @@
 decoder_bf_interpolate_mbinter(DECODER * dec,
 								IMAGE forward,
 								IMAGE backward,
-								const MACROBLOCK * pMB,
+								MACROBLOCK * pMB,
 								const uint32_t x_pos,
 								const uint32_t y_pos,
 								Bitstream * bs,
@@ -1034,6 +1045,9 @@
 	pU_Cur = dec->cur.u + (y_pos << 3) * stride2 + (x_pos << 3);
 	pV_Cur = dec->cur.v + (y_pos << 3) * stride2 + (x_pos << 3);
 
+	validate_vector(pMB->mvs, x_pos, y_pos, dec);
+	validate_vector(pMB->b_mvs, x_pos, y_pos, dec);
+
 	if (!direct) {
 		uv_dx = pMB->mvs[0].x;
 		uv_dy = pMB->mvs[0].y;
@@ -1381,7 +1395,6 @@
 	}
 }
 
-
 int
 decoder_decode(DECODER * dec,
 				xvid_dec_frame_t * frame, xvid_dec_stats_t * stats)