diff options
| author | Mans Rullgard <mans@mansr.com> | 2012-04-23 13:16:33 +0100 |
|---|---|---|
| committer | Reinhard Tartler <siretart@tauware.de> | 2012-05-06 21:40:58 +0200 |
| commit | c71c77e56fcc6d469d45e1c8ce04aa053124d3f8 (patch) | |
| tree | 3bdf11b5eb51ed49891de1225e510bb72ab9e400 /libavcodec/rle.c | |
| parent | 08c81f7365af96c1655767e68d6ec85bea50600c (diff) | |
| download | ffmpeg-c71c77e56fcc6d469d45e1c8ce04aa053124d3f8.tar.gz | |
vqavideo: return error if image size is not a multiple of block size
The decoder assumes in various places that the image size
is a multiple of the block size, and there is no obvious
way to support odd sizes. Bailing out early if the header
specifies a bad size avoids various errors later on.
Fixes CVE-2012-0947.
Signed-off-by: Mans Rullgard <mans@mansr.com>
(cherry picked from commit 58b2e0f0f2fc96c1158e04f8aba95cbe6157a1a3)
Signed-off-by: Reinhard Tartler <siretart@tauware.de>
(cherry picked from commit d5207e2af81580dd5e6277b354c8b459c3624f26)
Signed-off-by: Reinhard Tartler <siretart@tauware.de>
Diffstat (limited to 'libavcodec/rle.c')
0 files changed, 0 insertions, 0 deletions