mirror of https://git.ffmpeg.org/ffmpeg.git
bd2a3700c0
In the loop:
for (i=0; i<dstH; i++) {
int chrI= i*c->chrDstH / dstH;
when i*c->chrDstH > INT_MAX this leads to an integer overflow, which
results in a negative value for chrI and in out-of-buffer reads. The
overflow is avoided by forcing int64_t arithmetic by casting i to
int64_t.
Fix crash, and trac issue #72.
Signed-off-by: Stefano Sabatini <stefano.sabatini-lala@poste.it>
|
||
|---|---|---|
| .. | ||
| bfin | ||
| mlib | ||
| ppc | ||
| sparc | ||
| x86 | ||
| Makefile | ||
| colorspace-test.c | ||
| libswscale.v | ||
| options.c | ||
| rgb2rgb.c | ||
| rgb2rgb.h | ||
| rgb2rgb_template.c | ||
| swscale-test.c | ||
| swscale.c | ||
| swscale.h | ||
| swscale_internal.h | ||
| swscale_template.c | ||
| utils.c | ||
| yuv2rgb.c | ||