Module: libav Branch: release/0.5 Commit: 110aff4b2451bf8768523f6c7f054d2c04cd2a26
Author: Michael Niedermayer <[email protected]> Committer: Reinhard Tartler <[email protected]> Date: Fri Nov 18 19:10:21 2011 +0100 svq1dec: call avcodec_set_dimensions() after dimensions changed. Fixes NGS00148, CVE-2011-4579 Found-by: Phillip Langlois Signed-off-by: Michael Niedermayer <[email protected]> (cherry picked from commit 6e24b9488e67849a28e64a8056e05f83cf439229) Signed-off-by: Reinhard Tartler <[email protected]> (cherry picked from commit 0eca0da06e40b73af495cc05fbcfaa030fcf78ea) Signed-off-by: Reinhard Tartler <[email protected]> (cherry picked from commit 8ddc0b491d3c9c11c1e3d638fda51b4b604d32f4) Signed-off-by: Reinhard Tartler <[email protected]> --- libavcodec/svq1dec.c | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) diff --git a/libavcodec/svq1dec.c b/libavcodec/svq1dec.c index 7fef10b..7c4e5c9 100644 --- a/libavcodec/svq1dec.c +++ b/libavcodec/svq1dec.c @@ -676,6 +676,7 @@ static int svq1_decode_frame(AVCodecContext *avctx, #endif return result; } + avcodec_set_dimensions(avctx, s->width, s->height); //FIXME this avoids some confusion for "B frames" without 2 references //this should be removed after libavcodec can handle more flexible picture types & ordering _______________________________________________ libav-commits mailing list [email protected] https://lists.libav.org/mailman/listinfo/libav-commits
