This is an automatic generated email to let you know that the following patch 
were queued at the 
http://git.linuxtv.org/cgit.cgi/tvtime.git tree:

Subject: Fix array out of bounds access in kdetv filter plugins
Author:  Hans de Goede <[email protected]>
Date:    Sun Feb 14 13:23:07 2016 -0200

This is a read-only oob access to data on the stack, so likely harmless,
but still lets fix it.

BugLink: https://bugzilla.redhat.com/show_bug.cgi?id=876948

Signed-off-by: Hans de Goede <[email protected]>
Signed-off-by: Mauro Carvalho Chehab <[email protected]>

 plugins/kdetv_greedyh.c    | 2 +-
 plugins/kdetv_tomsmocomp.c | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

---

http://git.linuxtv.org/cgit.cgi/tvtime.git/commit/?id=21986adb616584792ad414b34c12c659866233c4
diff --git a/plugins/kdetv_greedyh.c b/plugins/kdetv_greedyh.c
index c567767d82b4..f97fd6d76a51 100644
--- a/plugins/kdetv_greedyh.c
+++ b/plugins/kdetv_greedyh.c
@@ -40,7 +40,7 @@ static void deinterlace_frame_di_greedyh( uint8_t *output, 
int outstride,
                                           int width, int height )
 {
     TDeinterlaceInfo Info;
-    TPicture Picture[ 8 ];
+    TPicture Picture[ MAX_PICTURE_HISTORY ];
     int stride = (width*2);
     int i;
 
diff --git a/plugins/kdetv_tomsmocomp.c b/plugins/kdetv_tomsmocomp.c
index 4f78f3e3037b..b16cf101f8eb 100644
--- a/plugins/kdetv_tomsmocomp.c
+++ b/plugins/kdetv_tomsmocomp.c
@@ -39,7 +39,7 @@ static void deinterlace_frame_di_tomsmocomp( uint8_t *output, 
int outstride,
                                              int width, int height )
 {
     TDeinterlaceInfo Info;
-    TPicture Picture[ 8 ];
+    TPicture Picture[ MAX_PICTURE_HISTORY ];
     int stride = (width*2);
     int i;
 

_______________________________________________
linuxtv-commits mailing list
[email protected]
http://www.linuxtv.org/cgi-bin/mailman/listinfo/linuxtv-commits

Reply via email to