diff options
author | Stefano Sabatini <stefano.sabatini-lala@poste.it> | 2011-04-25 01:17:08 +0200 |
---|---|---|
committer | Stefano Sabatini <stefano.sabatini-lala@poste.it> | 2011-04-25 22:45:19 +0200 |
commit | bd2a3700c045201b043a0e812d932e9d4fc37e82 (patch) | |
tree | 89ee8bc25a24b2ee908fec411ffca952b0e51e89 /libavcodec/vp5data.h | |
parent | 1d6c82d40541936fe67061a8374b5bae8fbc4cbb (diff) | |
download | ffmpeg-bd2a3700c045201b043a0e812d932e9d4fc37e82.tar.gz |
lsws: prevent overflow in sws_init_context()
In the loop:
for (i=0; i<dstH; i++) {
int chrI= i*c->chrDstH / dstH;
when i*c->chrDstH > INT_MAX this leads to an integer overflow, which
results in a negative value for chrI and in out-of-buffer reads. The
overflow is avoided by forcing int64_t arithmetic by casting i to
int64_t.
Fix crash, and trac issue #72.
Signed-off-by: Stefano Sabatini <stefano.sabatini-lala@poste.it>
Diffstat (limited to 'libavcodec/vp5data.h')
0 files changed, 0 insertions, 0 deletions