[SCM] libav/experimental: vp56: check buffer size to fix a potential segfault patch by Laurent Aimar fenrir _at_ videolan _dot_ org
siretart at users.alioth.debian.org
siretart at users.alioth.debian.org
Sun Jun 30 16:58:55 UTC 2013
The following commit has been merged in the experimental branch:
commit 68a4d3498f28eff3508595283074e1ed8493879d
Author: Laurent Aimar <fenrir at via.ecp.fr>
Date: Thu Jan 28 23:49:46 2010 +0000
vp56: check buffer size to fix a potential segfault
patch by Laurent Aimar fenrir _at_ videolan _dot_ org
Originally committed as revision 21521 to svn://svn.ffmpeg.org/ffmpeg/trunk
diff --git a/libavcodec/vp56.c b/libavcodec/vp56.c
index cbac71b..36027b4 100644
--- a/libavcodec/vp56.c
+++ b/libavcodec/vp56.c
@@ -504,8 +504,12 @@ int vp56_decode_frame(AVCodecContext *avctx, void *data, int *data_size,
int is_alpha, av_uninit(alpha_offset);
if (s->has_alpha) {
+ if (remaining_buf_size < 3)
+ return -1;
alpha_offset = bytestream_get_be24(&buf);
remaining_buf_size -= 3;
+ if (remaining_buf_size < alpha_offset)
+ return -1;
}
for (is_alpha=0; is_alpha < 1+s->has_alpha; is_alpha++) {
--
Libav/FFmpeg packaging
More information about the pkg-multimedia-commits
mailing list