[FFmpeg-cvslog] cavs: fix oCERT #2011-002 FFmpeg/libavcodec insufficient boundary check

Michael Niedermayer git at videolan.org
Wed Aug 10 14:11:34 CEST 2011


ffmpeg | branch: release/0.7 | Michael Niedermayer <michaelni at gmx.at> | Wed Aug 10 13:28:36 2011 +0200| [c5cbda50793e311aa73489d12184ffd6761c9fbf] | committer: Michael Niedermayer

cavs: fix oCERT #2011-002 FFmpeg/libavcodec insufficient boundary check

Signed-off-by: Michael Niedermayer <michaelni at gmx.at>

> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=c5cbda50793e311aa73489d12184ffd6761c9fbf
---

 libavcodec/cavsdec.c |    3 ++-
 1 files changed, 2 insertions(+), 1 deletions(-)

diff --git a/libavcodec/cavsdec.c b/libavcodec/cavsdec.c
index c6ccb06..6e83a7d 100644
--- a/libavcodec/cavsdec.c
+++ b/libavcodec/cavsdec.c
@@ -115,7 +115,8 @@ static inline int get_ue_code(GetBitContext *gb, int order) {
 static int decode_residual_block(AVSContext *h, GetBitContext *gb,
                                  const struct dec_2dvlc *r, int esc_golomb_order,
                                  int qp, uint8_t *dst, int stride) {
-    int i, level_code, esc_code, level, run, mask;
+    int i, esc_code, level, mask;
+    unsigned int level_code, run;
     DCTELEM level_buf[65];
     uint8_t run_buf[65];
     DCTELEM *block = h->block;



More information about the ffmpeg-cvslog mailing list