diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2016-11-01 19:24:49 +0100 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2016-11-17 12:47:40 +0100 |
| commit | 7521d5b8daae7969887f694caef5cd025f35b6ac (patch) | |
| tree | e0be5da2f764d79e4a663e3d74b8b7dd5513dd8c | |
| parent | 487accbf19be3879749ce5010abffb0c9894d5d6 (diff) | |
| download | ffmpeg-7521d5b8daae7969887f694caef5cd025f35b6ac.tar.gz | |
avcodec/sunrast: Fix input buffer pointer check
Fixes: out of array read
Fixes: poc.dat
Found-by: Bingchang, Liu @VARAS of IIE
Tested-by: bc L <l.bing.chang.bc@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 37138338ff602803d174b13fecd363a083bc2f9a)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
| -rw-r--r-- | libavcodec/sunrast.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libavcodec/sunrast.c b/libavcodec/sunrast.c index 25e11f6cd2..0af5626e35 100644 --- a/libavcodec/sunrast.c +++ b/libavcodec/sunrast.c @@ -168,7 +168,7 @@ static int sunrast_decode_frame(AVCodecContext *avctx, void *data, } } else { for (y = 0; y < h; y++) { - if (buf_end - buf < len) + if (buf_end - buf < alen) break; memcpy(ptr, buf, len); ptr += stride; |