mirror of
https://git.ffmpeg.org/ffmpeg.git
synced 2024-12-18 21:45:10 +00:00
vc1dec: Fix global array overread.
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
parent
8db2935db0
commit
a60a4d7041
@ -1049,8 +1049,8 @@ static void vc1_mc_4mv_chroma4(VC1Context *v)
|
||||
mquant = v->altpq; \
|
||||
if ((edges&8) && s->mb_y == (s->mb_height - 1)) \
|
||||
mquant = v->altpq; \
|
||||
if (!mquant) { \
|
||||
av_log(v->s.avctx,AV_LOG_ERROR, "zero mquant\n"); \
|
||||
if (!mquant || mquant > 31) { \
|
||||
av_log(v->s.avctx, AV_LOG_ERROR, "invalid mquant %d\n", mquant); \
|
||||
mquant = 1; \
|
||||
} \
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user