diff options
| author | Xi Wang <xi.wang@gmail.com> | 2013-01-22 17:49:29 -0500 |
|---|---|---|
| committer | Michael Niedermayer <michaelni@gmx.at> | 2013-01-23 05:55:19 +0100 |
| commit | e163d884ef6ccc52f02a176105098d15c451d6af (patch) | |
| tree | e90d9cd462dd6e1e0b5095b5a72a4fcd30ef985c /libavcodec/binkidct.c | |
| parent | 56cc629a645e479c233750a60a35264b4aa9a651 (diff) | |
| download | ffmpeg-e163d884ef6ccc52f02a176105098d15c451d6af.tar.gz | |
rtmp: fix multiple broken overflow checks
Sanity checks like `data + size >= data_end || data + size < data' are
broken, because `data + size < data' assumes pointer overflow, which is
undefined behavior in C. Many compilers such as gcc/clang optimize such
checks away.
Use `size < 0 || size >= data_end - data' instead.
Signed-off-by: Xi Wang <xi.wang@gmail.com>
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 902cfe2f74d777a7dc20ac68f2393b9f84b790c1)
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
Diffstat (limited to 'libavcodec/binkidct.c')
0 files changed, 0 insertions, 0 deletions