From b146d74730ab9ec5abede9066f770ad851e45fbc Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Sat, 14 Apr 2012 20:04:05 +0200 Subject: [PATCH] indeo4: update AVCodecContext width/height on size change Fixes CVE-2012-2787 Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Anton Khirnov --- libavcodec/ivi_common.c | 1 + 1 file changed, 1 insertion(+) diff --git a/libavcodec/ivi_common.c b/libavcodec/ivi_common.c index 5ebbf56d3c..6ff0f8028b 100644 --- a/libavcodec/ivi_common.c +++ b/libavcodec/ivi_common.c @@ -780,6 +780,7 @@ int ff_ivi_decode_frame(AVCodecContext *avctx, void *data, int *data_size, avctx->release_buffer(avctx, &ctx->frame); ctx->frame.reference = 0; + avcodec_set_dimensions(avctx, ctx->planes[0].width, ctx->planes[0].height); if ((result = avctx->get_buffer(avctx, &ctx->frame)) < 0) { av_log(avctx, AV_LOG_ERROR, "get_buffer() failed\n"); return result;