diff options
| author | Paul B Mahol <onemda@gmail.com> | 2019-10-13 23:10:16 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2022-05-04 18:37:34 +0200 |
| commit | 07bc7b2c075f510e344b49416adaf13b9a896a81 (patch) | |
| tree | b5eefbe1d1445d94e68a33939ae8d5b49faf9274 | |
| parent | 0744d7176ae1027d5ad7de28b283a78d58e64545 (diff) | |
| download | ffmpeg-07bc7b2c075f510e344b49416adaf13b9a896a81.tar.gz | |
avfilter/vf_fieldorder: fix heap-buffer overflow
Fixes #8264
(cherry picked from commit 07050d7bdc32d82e53ee5bb727f5882323d00dba)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
| -rw-r--r-- | libavfilter/vf_fieldorder.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/libavfilter/vf_fieldorder.c b/libavfilter/vf_fieldorder.c index ca55ff1f66..5707151f1b 100644 --- a/libavfilter/vf_fieldorder.c +++ b/libavfilter/vf_fieldorder.c @@ -108,8 +108,8 @@ static int filter_frame(AVFilterLink *inlink, AVFrame *frame) s->dst_tff ? "up" : "down"); h = frame->height; for (plane = 0; plane < 4 && frame->data[plane] && frame->linesize[plane]; plane++) { - dst_line_step = out->linesize[plane]; - src_line_step = frame->linesize[plane]; + dst_line_step = out->linesize[plane] * (h > 2); + src_line_step = frame->linesize[plane] * (h > 2); line_size = s->line_size[plane]; dst = out->data[plane]; src = frame->data[plane]; |