diff options
author | Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com> | 2016-10-13 22:14:46 +0200 |
---|---|---|
committer | Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com> | 2016-10-17 17:21:35 +0200 |
commit | d391719be19be2f2716dcb1da9f88b0b4214e4c4 (patch) | |
tree | a7ffd94a0f94e7cc3918d6b4a6833e3c26019ec3 /libavcodec/mips/aacdec_mips.c | |
parent | a22155dacd935e745c439a8646626c13f7e6aae4 (diff) | |
download | ffmpeg-d391719be19be2f2716dcb1da9f88b0b4214e4c4.tar.gz |
libopenjpegenc: fix out-of-bounds reads when filling the edges
The calculation of width/height should round up, not round down to
prevent setting width or height to 0.
Also image->comps[compno].w is unsigned (at least in openjpeg2), so the
calculation could silently wrap around without the explicit cast to int.
Reviewed-by: Michael Bradshaw <mjbshaw@gmail.com>
Reviewed-by: Michael Niedermayer <michael@niedermayer.cc>
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
(cherry picked from commit 56706ac0d5723cb549fec2602e798ab1bf6004cd)
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
Diffstat (limited to 'libavcodec/mips/aacdec_mips.c')
0 files changed, 0 insertions, 0 deletions