projects / platform / upstream / libav.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 5d2170c) | patch
indeo4/5: check empty tile size in decode_mb_info().
authorAnton Khirnov <anton@khirnov.net>
Sat, 29 Sep 2012 09:07:58 +0000 (11:07 +0200)
committerAnton Khirnov <anton@khirnov.net>
Sat, 29 Sep 2012 17:13:45 +0000 (19:13 +0200)
commitae3da0ae5550053583a6f281ea7fd940497ea0d1
tree0fddd047d55c65c5fd5feabfa1265ecf9403cdf3tree | snapshot
parent5d2170c53bf4c2b0499f230c43764e4acf228f88commit | diff
indeo4/5: check empty tile size in decode_mb_info().

This prevents writing into a too small array if some parameters changed
without the tile being reallocated.

Based on a patch by Michael Niedermayer <michaelni@gmx.at>

Fixes CVE-2012-2800

CC:libav-stable@libav.org

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
libavcodec/ivi_common.c diff | blob | history
Domain: Multimedia / Media Content;