Hi, On Wed, Jan 4, 2012 at 9:17 PM, Ronald S. Bultje <[email protected]> wrote: > On Wed, Jan 4, 2012 at 11:58 AM, Aneesh Dogra <[email protected]> wrote: >> 4xm decoder while decoding i2 frames can overread the buffer if proper checks >> are not made. >> --- >> libavcodec/4xm.c | 14 +++++++++++--- >> 1 files changed, 11 insertions(+), 3 deletions(-) >> >> diff --git a/libavcodec/4xm.c b/libavcodec/4xm.c >> index cfb8279..1862430 100644 >> --- a/libavcodec/4xm.c >> +++ b/libavcodec/4xm.c >> @@ -614,16 +614,24 @@ static int decode_i2_frame(FourXContext *f, const >> uint8_t *buf, int length){ >> int x, y, x2, y2; >> const int width= f->avctx->width; >> const int height= f->avctx->height; >> + const int mbs = ((width + 15) / 16) * ((height + 15) / 16); > > FFALIGN() - applied with that changed, thanks.
Actually this changes fate ref crcs, if that's expected and right, you should update those also. Ronald _______________________________________________ libav-devel mailing list [email protected] https://lists.libav.org/mailman/listinfo/libav-devel
