mirror of
https://git.ffmpeg.org/ffmpeg.git
synced 2025-03-25 04:19:05 +00:00
avcodec/g2meet: Check monochrome cursor width
Fixes out of array write Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
parent
69e4d8e6a4
commit
3c4c5ca1c1
@ -514,6 +514,11 @@ static int g2m_load_cursor(AVCodecContext *avctx, G2MContext *c,
|
|||||||
return AVERROR_PATCHWELCOME;
|
return AVERROR_PATCHWELCOME;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
if (cursor_fmt == 1 && cursor_w % 32) {
|
||||||
|
avpriv_report_missing_feature(avctx, "odd monochrome cursor width %d", cursor_w);
|
||||||
|
return AVERROR_PATCHWELCOME;
|
||||||
|
}
|
||||||
|
|
||||||
tmp = av_realloc(c->cursor, cursor_stride * cursor_h);
|
tmp = av_realloc(c->cursor, cursor_stride * cursor_h);
|
||||||
if (!tmp) {
|
if (!tmp) {
|
||||||
av_log(avctx, AV_LOG_ERROR, "Cannot allocate cursor buffer\n");
|
av_log(avctx, AV_LOG_ERROR, "Cannot allocate cursor buffer\n");
|
||||||
|
Loading…
Reference in New Issue
Block a user