Kostya Shishkov <[email protected]> added the comment:

This happens because VC-1 stream reports 1440x576 real size and 720x576 
display size. VC-1 decoder sets avctx->coded_width = 1440 and avctx-
>width = 720 in hope that FFMpeg will crop picture but in reality 
allocated picture is also 720x576 while MpegEncContext mb_width 
corresponds to 1440, thus writing past picture buffer and causing heap 
corruption.

In order to fix it somebody with good knowledge of mpegvideo internals 
is required.

----------
substatus: reproduced -> analyzed

________________________________________________
FFmpeg issue tracker <[email protected]>
<https://roundup.ffmpeg.org/issue2076>
________________________________________________

Reply via email to