diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2015-11-14 21:11:52 +0100 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2015-11-19 03:51:39 +0100 |
| commit | cb060668f12914fcd834b86c36d3c337eff0f173 (patch) | |
| tree | 24fdfd2671832e5d473e60effdd64490784265a3 /libavformat/h263dec.c | |
| parent | 7ab1f5b0d4b621dbd78bc901d38fcad6e19c375e (diff) | |
| download | ffmpeg-cb060668f12914fcd834b86c36d3c337eff0f173.tar.gz | |
avcodec/error_resilience: avoid accessing previous or next frames tables beyond height
The height of tables can be rounded up for MBAFF but this does not imply that is also true
for the previous frames
Fixes out of array reads
Fixes: c106b36fa36db8ff8f3ed0c82be7bea2/asan_heap-oob_32699f0_6321_467b9a1d7e03d7cfd310b7e65dc53bcc.mov
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit a105f52855d08e4ab1ed7306da8e32fc90d6d647)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Diffstat (limited to 'libavformat/h263dec.c')
0 files changed, 0 insertions, 0 deletions