aboutsummaryrefslogtreecommitdiffstats
path: root/libavcodec/vaapi_encode.c
diff options
context:
space:
mode:
authorAndreas Rheinhardt <andreas.rheinhardt@outlook.com>2021-11-21 01:57:41 +0100
committerAndreas Rheinhardt <andreas.rheinhardt@outlook.com>2021-11-26 16:10:24 +0100
commit9207dc3b0db368bb9cf5eb295cbc1129c2975e31 (patch)
treef376437d667aa5563ae54f9acca6ad8e8de79a62 /libavcodec/vaapi_encode.c
parent27c930002702f512b80124249c5efbcc0ef04841 (diff)
downloadffmpeg-9207dc3b0db368bb9cf5eb295cbc1129c2975e31.tar.gz
avcodec/h263: Fix global-buffer-overflow with noout flag2 set
h263_get_motion_length() forgot to take an absolute value; as a consequence, a negative index was used to access an array. This leads to potential crashes, but mostly it just accesses what is to the left of ff_mvtab (unless one uses ASAN), thereby defeating the purpose of the AV_CODEC_FLAG2_NO_OUTPUT because the sizes of the returned packets differ from the sizes the encoder would actually have produced. Signed-off-by: Andreas Rheinhardt <andreas.rheinhardt@outlook.com>
Diffstat (limited to 'libavcodec/vaapi_encode.c')
0 files changed, 0 insertions, 0 deletions