diff options
| author | Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com> | 2015-12-02 21:52:23 +0100 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2015-12-07 01:34:13 +0100 |
| commit | 2e54b8c379bad54599f82d63de26af7c934ccff6 (patch) | |
| tree | ac92a4e4102e7271a1e0a1d1cc2a0160f6944042 /tests/ref/fate/nc-demux | |
| parent | 913c642c21dd608cc53ea2482e9b4d3141bcd542 (diff) | |
| download | ffmpeg-2e54b8c379bad54599f82d63de26af7c934ccff6.tar.gz | |
mjpegdec: consider chroma subsampling in size check
If the chroma components are subsampled, smaller buffers are allocated
for them. In that case the maximal block_offset for the chroma
components is not as large as for the luma component.
This fixes out of bounds writes causing segmentation faults or memory
corruption.
Reviewed-by: Michael Niedermayer <michael@niedermayer.cc>
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
(cherry picked from commit 5adb5d9d894aa495e7bf9557b4c78350cbfc9d32)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Diffstat (limited to 'tests/ref/fate/nc-demux')
0 files changed, 0 insertions, 0 deletions