aboutsummaryrefslogtreecommitdiffstats
path: root/libavfilter
diff options
context:
space:
mode:
authorMichael Niedermayer <michael@niedermayer.cc>2023-12-22 22:25:25 +0100
committerMichael Niedermayer <michael@niedermayer.cc>2023-12-29 21:07:58 +0100
commit9d1ba698d2bed1d4bed731b3be62e84d72c35476 (patch)
tree3e0256640e42c2c6991e1c3fb1c6977a1b9e0fde /libavfilter
parenta88b06f9ee8c88f78bdd614fc25283225223e858 (diff)
downloadffmpeg-9d1ba698d2bed1d4bed731b3be62e84d72c35476.tar.gz
avfilter/vf_swaprect: assert that rectangles are within memory
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Diffstat (limited to 'libavfilter')
-rw-r--r--libavfilter/vf_swaprect.c5
1 files changed, 5 insertions, 0 deletions
diff --git a/libavfilter/vf_swaprect.c b/libavfilter/vf_swaprect.c
index 13ae149afd..8a983b605b 100644
--- a/libavfilter/vf_swaprect.c
+++ b/libavfilter/vf_swaprect.c
@@ -18,6 +18,7 @@
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
*/
+#include "libavutil/avassert.h"
#include "libavutil/avstring.h"
#include "libavutil/eval.h"
#include "libavutil/imgutils.h"
@@ -182,6 +183,10 @@ FF_ENABLE_DEPRECATION_WARNINGS
y2[1] = y2[2] = AV_CEIL_RSHIFT(y2[0], s->desc->log2_chroma_h);
y2[0] = y2[3] = y2[0];
+
+ av_assert0(FFMAX(x1[1], x2[1]) + pw[1] <= lw[1]);
+ av_assert0(FFMAX(y1[1], y2[1]) + ph[1] <= lh[1]);
+
for (p = 0; p < s->nb_planes; p++) {
if (ph[p] == ah[p] && pw[p] == aw[p]) {
uint8_t *src = in->data[p] + y1[p] * in->linesize[p] + x1[p] * s->pixsteps[p];