RepoMirrors/ffmpeg
1
0
Fork 0
mirror of https://git.ffmpeg.org/ffmpeg.git synced 2025-01-13 02:41:37 +00:00
Code Issues Projects Releases Wiki Activity

lzw: prevent buffer overreads.

Browse Source 
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
This commit is contained in:
Ronald S. Bultje 2012-03-28 17:06:00 -07:00
parent 28e8c4d59a
commit ddcf67c8a5
1 changed files with 8 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
libavcodec/lzw.c
View File

@ -101,10 +101,15 @@ void ff_lzw_decode_tail(LZWState *p)
struct LZWState *s = (struct LZWState *)p; struct LZWState *s = (struct LZWState *)p;
if(s->mode == FF_LZW_GIF) { if(s->mode == FF_LZW_GIF) {
while(s->pbuf < s->ebuf && s->bs>0){ while (s->bs > 0) {
if (s->pbuf + s->bs >= s->ebuf) {
s->pbuf = s->ebuf;
break;
} else {
s->pbuf += s->bs; s->pbuf += s->bs;
s->bs = *s->pbuf++; s->bs = *s->pbuf++;
} }
}
}else }else
s->pbuf= s->ebuf; s->pbuf= s->ebuf;
} }