diff options
| author | James Zern <jzern@google.com> | 2015-06-29 23:03:14 -0700 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2015-07-20 04:43:41 +0200 |
| commit | 002bbc36875dffe0f7e54c67409683bd5756cf5e (patch) | |
| tree | 4a65ac9fefa0a8eeb0295adfe5412963ab1b96a8 /libavdevice | |
| parent | 1ea58c6c6a8884689dd009d40cb21bbb0fa5bb36 (diff) | |
| download | ffmpeg-002bbc36875dffe0f7e54c67409683bd5756cf5e.tar.gz | |
vp9/update_prob: prevent out of bounds table read
the max value of the lookup in expanded form is:
(((1 << 7) - 1) << 1) - 65 + 1 + 64 = 254
add one entry of padding to inv_map_table[] to prevent out of bounds
access with non-conforming / fuzzed bitstreams
Signed-off-by: James Zern <jzern@google.com>
Reviewed-by: "Ronald S. Bultje" <rsbultje@gmail.com>
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit e91f860ea74e11e9178500fe8794c47f57dbf48c)
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
Diffstat (limited to 'libavdevice')
0 files changed, 0 insertions, 0 deletions