diff options
author | Andreas Rheinhardt <andreas.rheinhardt@outlook.com> | 2021-11-21 01:57:41 +0100 |
---|---|---|
committer | Andreas Rheinhardt <andreas.rheinhardt@outlook.com> | 2021-11-26 16:10:24 +0100 |
commit | 9207dc3b0db368bb9cf5eb295cbc1129c2975e31 (patch) | |
tree | f376437d667aa5563ae54f9acca6ad8e8de79a62 /libavfilter/lavfutils.h | |
parent | 27c930002702f512b80124249c5efbcc0ef04841 (diff) | |
download | ffmpeg-9207dc3b0db368bb9cf5eb295cbc1129c2975e31.tar.gz |
avcodec/h263: Fix global-buffer-overflow with noout flag2 set
h263_get_motion_length() forgot to take an absolute value;
as a consequence, a negative index was used to access an array.
This leads to potential crashes, but mostly it just accesses what
is to the left of ff_mvtab (unless one uses ASAN), thereby defeating
the purpose of the AV_CODEC_FLAG2_NO_OUTPUT because the sizes of
the returned packets differ from the sizes the encoder would actually
have produced.
Signed-off-by: Andreas Rheinhardt <andreas.rheinhardt@outlook.com>
Diffstat (limited to 'libavfilter/lavfutils.h')
0 files changed, 0 insertions, 0 deletions