projects / platform / upstream / libav.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 332555f) | patch
indeo4/5: check empty tile size in decode_mb_info().
authorAnton Khirnov <anton@khirnov.net>
Sat, 29 Sep 2012 09:07:58 +0000 (11:07 +0200)
committerReinhard Tartler <siretart@tauware.de>
Sun, 14 Oct 2012 20:03:24 +0000 (16:03 -0400)
commit0815d9174c482f43f2094bf194d174cf26ee62a2
tree3b263ecf70dc91be8f1a367e1d5a5cfb8217e5datree | snapshot
parent332555f6604964186ee4744e433c38119fd9853dcommit | diff
indeo4/5: check empty tile size in decode_mb_info().

This prevents writing into a too small array if some parameters changed
without the tile being reallocated.

Based on a patch by Michael Niedermayer <michaelni@gmx.at>

Fixes CVE-2012-2800

CC:libav-stable@libav.org

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
(cherry picked from commit ae3da0ae5550053583a6f281ea7fd940497ea0d1)

Signed-off-by: Reinhard Tartler <siretart@tauware.de>
libavcodec/ivi_common.c diff | blob | history
Domain: Multimedia / Media Content;