----- Original Message -----

> From: Aneesh Dogra <[email protected]>
> To: [email protected]
> Cc: Aneesh Dogra <[email protected]>
> Sent: Monday, December 12, 2011 11:21 PM
> Subject: [libav-devel] [PATCH] vc-1: fixes invalid reads
> 
> ---
> libavcodec/vc1dec.c |    5 ++++-
> 1 files changed, 4 insertions(+), 1 deletions(-)
> 
> diff --git a/libavcodec/vc1dec.c b/libavcodec/vc1dec.c
> index 0340dc2..21285c0 100644
> --- a/libavcodec/vc1dec.c
> +++ b/libavcodec/vc1dec.c
> @@ -5522,8 +5522,11 @@ static int vc1_decode_frame(AVCodecContext *avctx, 
> void 
> *data,
>              }
>          } else if (v->interlace && ((buf[0] & 0xC0) == 0xC0)) { 
> /* WVC1 interlaced stores both fields divided by marker */
>              const uint8_t *divider;
> -
> +            n_slices1 = n_slices;
> +            slices = av_realloc(slices, sizeof(*slices) * (n_slices+1));
> +            slices[n_slices].mby_start = s->mb_height >> 1;
>              divider = find_next_marker(buf, buf + buf_size);
> +
>              if ((divider == (buf + buf_size)) || AV_RB32(divider) != 
> VC1_CODE_FIELD) {
>                  av_log(avctx, AV_LOG_ERROR, "Error in WVC1 interlaced 
> frame\n");
>                  goto err;
> -- 
> 1.7.4.1
> 
>

This patch is not necessary anymore.
_______________________________________________
libav-devel mailing list
[email protected]
https://lists.libav.org/mailman/listinfo/libav-devel

Reply via email to