On Tue, Feb 04, 2014 at 11:31:40AM +0100, Anton Khirnov wrote: > Fixes invalid reads. > > Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind > CC:[email protected] > --- > libavcodec/shorten.c | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > > diff --git a/libavcodec/shorten.c b/libavcodec/shorten.c > index 992e01b..c465fff 100644 > --- a/libavcodec/shorten.c > +++ b/libavcodec/shorten.c > @@ -431,7 +431,7 @@ static int shorten_decode_frame(AVCodecContext *avctx, > void *data, > void *tmp_ptr; > s->max_framesize = 1024; // should hopefully be enough for the first > header > tmp_ptr = av_fast_realloc(s->bitstream, &s->allocated_bitstream_size, > - s->max_framesize); > + s->max_framesize + > FF_INPUT_BUFFER_PADDING_SIZE); > if (!tmp_ptr) { > av_log(avctx, AV_LOG_ERROR, "error allocating bitstream > buffer\n"); > return AVERROR(ENOMEM); > --
LGTM _______________________________________________ libav-devel mailing list [email protected] https://lists.libav.org/mailman/listinfo/libav-devel
