GitList

Browse code

Fixes CVE-2011-3935

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Michael Niedermayer authored on 2012/01/25 14:32:05
Showing 1 changed files

@@ -546,6 +546,9 @@ static int codec_get_buffer(AVCodecContext *s, AVFrame *frame)
                          FrameBuffer *buf;
                          int ret, i;
                     +    if(av_image_check_size(s->width, s->height, 0, s))
                     +        return -1;
+                    +
                          if (!ist->buffer_pool && (ret = alloc_buffer(s, ist, &ist->buffer_pool)) < 0)
                              return ret;