diff options
| author | Michael Niedermayer <michaelni@gmx.at> | 2011-08-10 13:28:36 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michaelni@gmx.at> | 2011-08-10 13:59:15 +0200 |
| commit | c5cbda50793e311aa73489d12184ffd6761c9fbf (patch) | |
| tree | 0ed4c26e7c49962bb97c9a681976262e2acdb746 | |
| parent | 8893f7d815db4efed797101d7a94718554990706 (diff) | |
| download | ffmpeg-c5cbda50793e311aa73489d12184ffd6761c9fbf.tar.gz | |
cavs: fix oCERT #2011-002 FFmpeg/libavcodec insufficient boundary check
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
| -rw-r--r-- | libavcodec/cavsdec.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/libavcodec/cavsdec.c b/libavcodec/cavsdec.c index c6ccb06524..6e83a7d381 100644 --- a/libavcodec/cavsdec.c +++ b/libavcodec/cavsdec.c @@ -115,7 +115,8 @@ static inline int get_ue_code(GetBitContext *gb, int order) { static int decode_residual_block(AVSContext *h, GetBitContext *gb, const struct dec_2dvlc *r, int esc_golomb_order, int qp, uint8_t *dst, int stride) { - int i, level_code, esc_code, level, run, mask; + int i, esc_code, level, mask; + unsigned int level_code, run; DCTELEM level_buf[65]; uint8_t run_buf[65]; DCTELEM *block = h->block; |