diff options
author | Andreas Cadhalpun <andreas.cadhalpun@googlemail.com> | 2015-05-05 22:10:44 +0200 |
---|---|---|
committer | Michael Niedermayer <michaelni@gmx.at> | 2015-06-01 23:25:22 +0200 |
commit | 68c11b665458bf43d5f751131c43c6e402e5e02f (patch) | |
tree | 1027b47437f23411b66bf8d89f202970c547e12d /tests/ref/fate/gifenc-bgr8 | |
parent | 10429a5284cd820c0a641622749b07dbc02d703f (diff) | |
download | ffmpeg-68c11b665458bf43d5f751131c43c6e402e5e02f.tar.gz |
diracdec: avoid overflow of bytes*8 in decode_lowdelay
If bytes is large enough, bytes*8 can overflow and become negative.
In that case 'bufsize -= bytes*8' causes bufsize to increase instead of
decrease.
This leads to a segmentation fault.
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 9e66b39aa87eb653a6e5d15f70b792ccbf719de7)
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
Diffstat (limited to 'tests/ref/fate/gifenc-bgr8')
0 files changed, 0 insertions, 0 deletions