vlc/vlc-2.2 | branch: master | Francois Cartegnie <[email protected]> | Wed Oct 8 17:59:23 2014 +0200| [ee94797446fde0d4d622823c77116abc6c90c3ed] | committer: Jean-Baptiste Kempf
demux: livavi: fix heap buffer ofw in strf parsing (fix #12359) (cherry picked from commit cd87a5a9482adef5c679f80fc3a75eccbd7c6970) Signed-off-by: Jean-Baptiste Kempf <[email protected]> > http://git.videolan.org/gitweb.cgi/vlc/vlc-2.2.git/?a=commit;h=ee94797446fde0d4d622823c77116abc6c90c3ed --- modules/demux/avi/libavi.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/modules/demux/avi/libavi.c b/modules/demux/avi/libavi.c index 79cd34b..5da6f12 100644 --- a/modules/demux/avi/libavi.c +++ b/modules/demux/avi/libavi.c @@ -471,12 +471,12 @@ static int AVI_ChunkRead_strf( stream_t *s, avi_chunk_t *p_chk ) if ( !p_chk->strf.vids.p_bih->biClrUsed ) p_chk->strf.vids.p_bih->biClrUsed = (1 << p_chk->strf.vids.p_bih->biBitCount); - if( i_extrasize > (UINT32_MAX * sizeof(uint32_t)) ) + if( i_extrasize / sizeof(uint32_t) > UINT32_MAX ) p_chk->strf.vids.p_bih->biClrUsed = UINT32_MAX; else { p_chk->strf.vids.p_bih->biClrUsed = - __MAX( i_extrasize / sizeof(uint32_t), + __MIN( i_extrasize / sizeof(uint32_t), p_chk->strf.vids.p_bih->biClrUsed ); } _______________________________________________ vlc-commits mailing list [email protected] https://mailman.videolan.org/listinfo/vlc-commits
