diff options
| author | Paul B Mahol <onemda@gmail.com> | 2019-10-19 11:56:02 +0200 |
|---|---|---|
| committer | Paul B Mahol <onemda@gmail.com> | 2019-10-19 11:58:34 +0200 |
| commit | ce5274c1385d55892a692998923802023526b765 (patch) | |
| tree | 7d1d17860e0ec2592ba5707c95189901c708e36d | |
| parent | c8f3915f8d39dcb20ba79bb955b2d0899f0b0147 (diff) | |
| download | ffmpeg-ce5274c1385d55892a692998923802023526b765.tar.gz | |
avfilter/vf_fieldmatch: fix heap-buffer overflow
Also fix use of uninitialized values.
Fixes #8239
| -rw-r--r-- | libavfilter/vf_fieldmatch.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libavfilter/vf_fieldmatch.c b/libavfilter/vf_fieldmatch.c index d115229e53..fa4aa8239c 100644 --- a/libavfilter/vf_fieldmatch.c +++ b/libavfilter/vf_fieldmatch.c @@ -950,7 +950,7 @@ static int config_input(AVFilterLink *inlink) fm->tpitchy = FFALIGN(w, 16); fm->tpitchuv = FFALIGN(w >> 1, 16); - fm->tbuffer = av_malloc(h/2 * fm->tpitchy); + fm->tbuffer = av_calloc((h/2 + 4) * fm->tpitchy, sizeof(*fm->tbuffer)); fm->c_array = av_malloc((((w + fm->blockx/2)/fm->blockx)+1) * (((h + fm->blocky/2)/fm->blocky)+1) * 4 * sizeof(*fm->c_array)); |