On Thu, Nov 24, 2011 at 04:16:16PM +0100, Luca Barbato wrote:
> On 24/11/11 14:37, Måns Rullgård wrote:
> >Why would this function be called with negative lengths?
> 
> it is used in
> 
> libavcodec/cscd.c:            if (av_lzo1x_decode(c->decomp_buf,
> &outlen, &buf[2], &inlen))
> libavcodec/nuv.c:        if (av_lzo1x_decode(c->decomp_buf, &outlen,
> buf, &inlen))
> libavformat/matroskadec.c:            result =
> av_lzo1x_decode(pkt_data, &olen, data, &isize);
> 
> Shall we guess which of those feeds it something strange?

no, just make sure nothing _does_ feed it something strange
_______________________________________________
libav-devel mailing list
[email protected]
https://lists.libav.org/mailman/listinfo/libav-devel

Reply via email to