From 3f09d4f6d43468dbc9307bb937516a32287008dc Mon Sep 17 00:00:00 2001 From: Vittorio Giovara Date: Tue, 11 Nov 2014 17:40:04 +0100 Subject: [PATCH] ffv1: fix out-of-bounds read CC: libav-stable@libav.org Bug-Id: CID 1047234 (cherry picked from commit 6abe7edabb7d57e82d7ea6312d30cf05d2192c5b) Signed-off-by: Luca Barbato --- libavcodec/ffv1enc.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libavcodec/ffv1enc.c b/libavcodec/ffv1enc.c index 179453db5e..93630b42e8 100644 --- a/libavcodec/ffv1enc.c +++ b/libavcodec/ffv1enc.c @@ -71,7 +71,7 @@ static void find_best_state(uint8_t best_state[256][256], best_len[k] = len; best_state[i][k] = j; } - for (m = 0; m < 256; m++) + for (m = 1; m < 256; m++) if (occ[m]) { newocc[one_state[m]] += occ[m] * p; newocc[256 - one_state[256 - m]] += occ[m] * (1 - p);