Hi, On Wed, Jan 4, 2012 at 10:30 PM, Aneesh Dogra <[email protected]> wrote: > 4xm decoder while decoding i2 frames can overread the buffer if proper checks > are not made. > > Note: The fate ref file is also updated with correct framecrc's. > --- > libavcodec/4xm.c | 14 +++- > tests/ref/fate/4xm-2 | 189 > ++++---------------------------------------------- > 2 files changed, 26 insertions(+), 177 deletions(-) > > diff --git a/libavcodec/4xm.c b/libavcodec/4xm.c > index cfb8279..d16c232 100644 > --- a/libavcodec/4xm.c > +++ b/libavcodec/4xm.c > @@ -614,16 +614,24 @@ static int decode_i2_frame(FourXContext *f, const > uint8_t *buf, int length){ > int x, y, x2, y2; > const int width= f->avctx->width; > const int height= f->avctx->height; > + const int mbs = FFALIGN(width, 16) * FFALIGN(height, 16);
Well that's not correct... Ronald _______________________________________________ libav-devel mailing list [email protected] https://lists.libav.org/mailman/listinfo/libav-devel
