diff options
| author | Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com> | 2015-12-02 21:52:23 +0100 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2015-12-07 01:34:15 +0100 |
| commit | d52b5f85f2837b0de9bdefe2a650d8d1b0e02ec1 (patch) | |
| tree | f619a8118943cdb4964574b3532bf4cf740ecc79 /libavutil/rational.c | |
| parent | ffe40ef9b4942b4be4e82f1cb31f2b41ab2c1685 (diff) | |
| download | ffmpeg-d52b5f85f2837b0de9bdefe2a650d8d1b0e02ec1.tar.gz | |
mjpegdec: consider chroma subsampling in size checkn2.5.9
If the chroma components are subsampled, smaller buffers are allocated
for them. In that case the maximal block_offset for the chroma
components is not as large as for the luma component.
This fixes out of bounds writes causing segmentation faults or memory
corruption.
Reviewed-by: Michael Niedermayer <michael@niedermayer.cc>
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
(cherry picked from commit 5adb5d9d894aa495e7bf9557b4c78350cbfc9d32)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Diffstat (limited to 'libavutil/rational.c')
0 files changed, 0 insertions, 0 deletions