smpte: Fix integer overflow with possible heap corruption in GstMask creation.
authorAdam Doupe <adamdoupe@gmail.com>
Thu, 19 May 2022 04:16:25 +0000 (04:16 +0000)
committerGStreamer Marge Bot <gitlab-merge-bot@gstreamer-foundation.org>
Wed, 15 Jun 2022 14:53:50 +0000 (14:53 +0000)
commitbe11a6e26b62f9822fe382d1b6727ddecb30b3af
tree9a49b30211847e13acc2199d6a1f798b094f9253
parent87230db55c02bde09d34a96b69216e7c4015bc26
smpte: Fix integer overflow with possible heap corruption in GstMask creation.

Check that width*height*sizeof(guint32) doesn't overflow when
allocated user_data for mask, potential for heap overwrite when
inverting.

Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1231

Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/2603>
subprojects/gst-plugins-good/gst/smpte/gstmask.c