aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorAndreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>2015-11-14 22:46:46 +0100
committerAndreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>2015-11-26 01:37:13 +0100
commit725d7fb2c608f8f4712fc13750455eec47b0cc4a (patch)
tree2fc410cb9e0c08a43c68b5e99e36df8bc915c28b
parent258584cfaf8684dac54b997f112c62783481bd7a (diff)
downloadffmpeg-725d7fb2c608f8f4712fc13750455eec47b0cc4a.tar.gz
mpegvideo: clear overread in clear_context
Otherwise the h263p decoder can try to copy overread bytes, even though buffer is NULL. Reviewed-by: Michael Niedermayer <michael@niedermayer.cc> Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com> (cherry picked from commit 6a69a175e7b5c5393528ed0f5753e41573fa0df2) Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
-rw-r--r--libavcodec/mpegvideo.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/libavcodec/mpegvideo.c b/libavcodec/mpegvideo.c
index 06188a03c0..60b9f8a8a7 100644
--- a/libavcodec/mpegvideo.c
+++ b/libavcodec/mpegvideo.c
@@ -1257,6 +1257,7 @@ static void clear_context(MpegEncContext *s)
s->parse_context.buffer = NULL;
s->parse_context.buffer_size = 0;
+ s->parse_context.overread = 0;
s->bitstream_buffer = NULL;
s->allocated_bitstream_buffer_size = 0;
s->picture = NULL;