diff options
| author | Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com> | 2016-11-24 23:57:46 +0100 |
|---|---|---|
| committer | Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com> | 2016-11-25 22:22:19 +0100 |
| commit | d147114b9de0aa443388b429aad3a71859bf2af6 (patch) | |
| tree | 6f25e5febac82b0d490535ab2fe4736a5f718013 /libavformat/mp3dec.c | |
| parent | ad8203662613b4d0cb8342b267f748eeb0e968a0 (diff) | |
| download | ffmpeg-d147114b9de0aa443388b429aad3a71859bf2af6.tar.gz | |
mss2: only use error correction for matching block counts
This fixes a heap-buffer-overflow in ff_er_frame_end when decoding mss2
with coded_width/coded_height larger than width/height.
Reviewed-by: Michael Niedermayer <michael@niedermayer.cc>
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
(cherry picked from commit 2566ad98b01538ea589e5ee07b69fc566aadc348)
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
Diffstat (limited to 'libavformat/mp3dec.c')
0 files changed, 0 insertions, 0 deletions