diff options
| author | Anton Khirnov <anton@khirnov.net> | 2012-09-29 11:07:58 +0200 |
|---|---|---|
| committer | Reinhard Tartler <siretart@tauware.de> | 2012-10-14 16:03:24 -0400 |
| commit | 0815d9174c482f43f2094bf194d174cf26ee62a2 (patch) | |
| tree | 3b263ecf70dc91be8f1a367e1d5a5cfb8217e5da /libavformat/libavformat.v | |
| parent | 332555f6604964186ee4744e433c38119fd9853d (diff) | |
| download | ffmpeg-0815d9174c482f43f2094bf194d174cf26ee62a2.tar.gz | |
indeo4/5: check empty tile size in decode_mb_info().
This prevents writing into a too small array if some parameters changed
without the tile being reallocated.
Based on a patch by Michael Niedermayer <michaelni@gmx.at>
Fixes CVE-2012-2800
CC:libav-stable@libav.org
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
(cherry picked from commit ae3da0ae5550053583a6f281ea7fd940497ea0d1)
Signed-off-by: Reinhard Tartler <siretart@tauware.de>
Diffstat (limited to 'libavformat/libavformat.v')
0 files changed, 0 insertions, 0 deletions