Port r15532 and r16552 from libvorbis.
Fix for bug #1456-- the 'bulletproofing' from CVE-2008-1420 inadvertantly rejects a harmless/legal (if suboptimal) codebook arrangement that was apparently used in 1.0b1. Modify fix for Trac #1572; some files from the earliest beta accidentally used an oversized phrasebook in res decode; allow these. git-svn-id: https://svn.xiph.org/trunk/Tremor@17520 0101bb08-14d6-0310-b084-bc0e0c8e3800
Showing with 7 additions and 3 deletions