diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2023-12-22 22:27:08 +0100 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2023-12-29 21:07:59 +0100 |
| commit | 7deaca71b32c556620e05954ca2d13fbe9aacf1f (patch) | |
| tree | d861d90bc8623cb0b2a443d935bf3c3864949f1b /libavfilter | |
| parent | 9f4c5bd7d23eb94afe85290e03748f52483102b8 (diff) | |
| download | ffmpeg-7deaca71b32c556620e05954ca2d13fbe9aacf1f.tar.gz | |
avfilter/vf_swaprect: round coordinates down
Fixes: out of array access:
Fixes: tickets/10745/poc12ffmpeg
Found-by: Li Zeyuan and Zeng Yunxiang.
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Diffstat (limited to 'libavfilter')
| -rw-r--r-- | libavfilter/vf_swaprect.c | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/libavfilter/vf_swaprect.c b/libavfilter/vf_swaprect.c index 20d8e233e4..119fd692fa 100644 --- a/libavfilter/vf_swaprect.c +++ b/libavfilter/vf_swaprect.c @@ -173,14 +173,14 @@ FF_ENABLE_DEPRECATION_WARNINGS lw[1] = lw[2] = AV_CEIL_RSHIFT(inlink->w, s->desc->log2_chroma_w); lw[0] = lw[3] = inlink->w; - x1[1] = x1[2] = AV_CEIL_RSHIFT(x1[0], s->desc->log2_chroma_w); + x1[1] = x1[2] = (x1[0] >> s->desc->log2_chroma_w); x1[0] = x1[3] = x1[0]; - y1[1] = y1[2] = AV_CEIL_RSHIFT(y1[0], s->desc->log2_chroma_h); + y1[1] = y1[2] = (y1[0] >> s->desc->log2_chroma_h); y1[0] = y1[3] = y1[0]; - x2[1] = x2[2] = AV_CEIL_RSHIFT(x2[0], s->desc->log2_chroma_w); + x2[1] = x2[2] = (x2[0] >> s->desc->log2_chroma_w); x2[0] = x2[3] = x2[0]; - y2[1] = y2[2] = AV_CEIL_RSHIFT(y2[0], s->desc->log2_chroma_h); + y2[1] = y2[2] = (y2[0] >> s->desc->log2_chroma_h); y2[0] = y2[3] = y2[0]; |