Hi, On Wed, Jan 4, 2012 at 11:58 AM, Aneesh Dogra <[email protected]> wrote: > 4xm decoder while decoding i2 frames can overread the buffer if proper checks > are not made. > --- > libavcodec/4xm.c | 14 +++++++++++--- > 1 files changed, 11 insertions(+), 3 deletions(-) > > diff --git a/libavcodec/4xm.c b/libavcodec/4xm.c > index cfb8279..1862430 100644 > --- a/libavcodec/4xm.c > +++ b/libavcodec/4xm.c > @@ -614,16 +614,24 @@ static int decode_i2_frame(FourXContext *f, const > uint8_t *buf, int length){ > int x, y, x2, y2; > const int width= f->avctx->width; > const int height= f->avctx->height; > + const int mbs = ((width + 15) / 16) * ((height + 15) / 16);
FFALIGN() - applied with that changed, thanks. Ronald _______________________________________________ libav-devel mailing list [email protected] https://lists.libav.org/mailman/listinfo/libav-devel
