diff options
| author | Michael Niedermayer <michaelni@gmx.at> | 2012-04-15 14:11:50 +0200 |
|---|---|---|
| committer | Reinhard Tartler <siretart@tauware.de> | 2013-01-04 07:43:37 +0100 |
| commit | aa097b4d5fd41679cda6780fd8d70a3de33c6820 (patch) | |
| tree | 7bf7c1ba2e19bb73c3d0f9b2f8869c3021a689f7 /libavcodec/h264_refs.c | |
| parent | 8148833193c6773b3db9b1759e62c2295d487ec7 (diff) | |
| download | ffmpeg-aa097b4d5fd41679cda6780fd8d70a3de33c6820.tar.gz | |
indeo5: check tile size in decode_mb_info().
This prevents writing into a too small array if some parameters changed
without the tile being reallocated.
Fixes CVE-2012-2794
CC:libav-stable@libav.org
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Anton Khirnov <anton@khirnov.net>
(cherry picked from commit 2d09cdbaf2f449ba23d54e97e94bd97ca22208c6)
Signed-off-by: Reinhard Tartler <siretart@tauware.de>
Diffstat (limited to 'libavcodec/h264_refs.c')
0 files changed, 0 insertions, 0 deletions