diff options
| author | Anton Khirnov <anton@khirnov.net> | 2012-09-29 11:07:58 +0200 |
|---|---|---|
| committer | Reinhard Tartler <siretart@tauware.de> | 2013-02-02 09:54:16 +0100 |
| commit | 440e98574bde9ca606dfea60c7dda8de555067f7 (patch) | |
| tree | de8b96d1b602911c6e18274a14c90f8c9d5670be /libavformat/sapenc.c | |
| parent | 604d72aa0d050a95aefdc15fc57743415af8283b (diff) | |
| download | ffmpeg-440e98574bde9ca606dfea60c7dda8de555067f7.tar.gz | |
indeo4/5: check empty tile size in decode_mb_info().
This prevents writing into a too small array if some parameters changed
without the tile being reallocated.
Based on a patch by Michael Niedermayer <michaelni@gmx.at>
Fixes CVE-2012-2800
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
(cherry picked from commit ae3da0ae5550053583a6f281ea7fd940497ea0d1)
Conflicts:
libavcodec/ivi_common.c
Diffstat (limited to 'libavformat/sapenc.c')
0 files changed, 0 insertions, 0 deletions