On Sat, Apr 18, 2015 at 8:51 PM, Luca Barbato <[email protected]> wrote:
>
> Is the input sufficiently validated? (e.g. can I get out of out by
> feeding appropriate offset and out[pos]?)

I suppose so, offset is width * step, step is validated before) and
pos should never get past data[0] bounds for valid input because of
the size check before.
Should I add some additional validation? I noticed I haven't validated
width and height with ff_set_dimension, would that help?
-- 
Vittorio
_______________________________________________
libav-devel mailing list
[email protected]
https://lists.libav.org/mailman/listinfo/libav-devel

Reply via email to