mirror of https://git.ffmpeg.org/ffmpeg.git
msrle: Use FFABS to determine the frame size in msrle_decode_pal4
As done in msrle_decode_8_16_24_32. Bug-Id: CVE-2015-3395 CC: libav-stable@libav.org
This commit is contained in:
parent
4dc0fbb13c
commit
7064209096
|
@ -39,7 +39,7 @@ static int msrle_decode_pal4(AVCodecContext *avctx, AVPicture *pic,
|
|||
unsigned int pixel_ptr = 0;
|
||||
int row_dec = pic->linesize[0];
|
||||
int row_ptr = (avctx->height - 1) * row_dec;
|
||||
int frame_size = row_dec * avctx->height;
|
||||
int frame_size = FFABS(row_dec) * avctx->height;
|
||||
int i;
|
||||
|
||||
while (row_ptr >= 0) {
|
||||
|
|
Loading…
Reference in New Issue