diff options
| author | Andreas Rheinhardt <andreas.rheinhardt@gmail.com> | 2020-09-15 03:03:18 +0200 |
|---|---|---|
| committer | Andreas Rheinhardt <andreas.rheinhardt@gmail.com> | 2020-09-15 19:25:26 +0200 |
| commit | e42fc6263379176869dd9a6467e37f9956d56431 (patch) | |
| tree | c3b3d082c6c5786418d13b6e189d1e13f01ba8af /libavcodec/bintext.c | |
| parent | b78031cf1670c176e97f62ad6a4865d3a44c1507 (diff) | |
| download | ffmpeg-e42fc6263379176869dd9a6467e37f9956d56431.tar.gz | |
avcodec/mobiclip: Fix heap-buffer-overflow
The MobiClip decoder uses adjacent pixels for prediction; yet when
accessing the left pixel, it was forgotten to clip the x coordinate.
This results in an heap-buffer-overflow. It can e.g. be reproduced with
the sample from https://samples.ffmpeg.org/V-codecs/MOHD/crap.avi when
forcing the video decoder to mobiclip.
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Andreas Rheinhardt <andreas.rheinhardt@gmail.com>
Diffstat (limited to 'libavcodec/bintext.c')
0 files changed, 0 insertions, 0 deletions