RepoMirrors
/
ffmpeg
mirror of https://git.ffmpeg.org/ffmpeg.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

jpeglsdec: Prevent out of array write. 

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
Michael Niedermayer 2012-02-13 23:50:35 +01:00
parent dda713f870
commit 00ab9cdae1
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
libavcodec/jpeglsdec.c
View File

@ -198,6 +198,9 @@ static inline void ls_decode_line(JLSState *state, MJpegDecodeContext *s, void *
r = ff_log2_run[state->run_index[comp]]; r = ff_log2_run[state->run_index[comp]];
if(r) if(r)
r = get_bits_long(&s->gb, r); r = get_bits_long(&s->gb, r);
if(x + r * stride > w) {
r = (w - x) / stride;
}
for(i = 0; i < r; i++) { for(i = 0; i < r; i++) {
W(dst, x, Ra); W(dst, x, Ra);
x += stride; x += stride;