On Thu, Feb 27, 2014 at 07:30:12PM -0500, [email protected] wrote:
> From: Michael Niedermayer <[email protected]>
> 
> Sample file available via https://trac.ffmpeg.org/ticket/2922
> 
> Addresses: CVE-2013-7013
> CC: [email protected]
> Found-by: ami_stuff
> Signed-off-by: Reinhard Tartler <[email protected]>
> ---
>  libavcodec/g2meet.c | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/libavcodec/g2meet.c b/libavcodec/g2meet.c
> index eda57f8..d9baff6 100644
> --- a/libavcodec/g2meet.c
> +++ b/libavcodec/g2meet.c
> @@ -460,7 +460,7 @@ static int g2m_init_buffers(G2MContext *c)
>      if (!c->synth_tile || !c->jpeg_tile ||
>          c->old_tile_w < c->tile_width ||
>          c->old_tile_h < c->tile_height) {
> -        c->tile_stride = FFALIGN(c->tile_width * 3, 16);
> +        c->tile_stride = FFALIGN(c->tile_width, 16) * 3;
>          aligned_height = FFALIGN(c->tile_height,    16);
>          av_free(c->synth_tile);
>          av_free(c->jpeg_tile);
> -- 

it's contradicting the intent (stride is width * bytes per pixel aligned)
and not needed
_______________________________________________
libav-devel mailing list
[email protected]
https://lists.libav.org/mailman/listinfo/libav-devel

Reply via email to