aboutsummaryrefslogtreecommitdiffstats
path: root/libavcodec/truemotion1data.h
diff options
context:
space:
mode:
authorXi Wang <xi.wang@gmail.com>2013-01-22 21:40:05 -0500
committerMichael Niedermayer <michaelni@gmx.at>2013-03-20 22:02:28 +0100
commit3fb1a6c7025312ae745e0e9970a72c37a77c7a40 (patch)
tree9bd7f915636b46666626ec6b4f0e0805b1658604 /libavcodec/truemotion1data.h
parentdd646260228350f3292cc06357111b4a3863c6e5 (diff)
downloadffmpeg-3fb1a6c7025312ae745e0e9970a72c37a77c7a40.tar.gz
rtmp: fix buffer overflows in ff_amf_tag_contents()
A negative `size' will bypass FFMIN(). In the subsequent memcpy() call, `size' will be considered as a large positive value, leading to a buffer overflow. Change the type of `size' to unsigned int to avoid buffer overflow, and simplify overflow checks accordingly. Signed-off-by: Xi Wang <xi.wang@gmail.com> Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 4e692374f7962ea358c329de38c380103f8991b6) Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
Diffstat (limited to 'libavcodec/truemotion1data.h')
0 files changed, 0 insertions, 0 deletions