[FFmpeg-devel] [PATCH 1/3] exr: limit expected_len to tmp buffer size

[Andreas Cadhalpun]

Hi,

On 16.11.2016 21:29, Martin Vignali wrote:
> in what case expected_len can be > to uncompress_size ?

td->xsize = 800
td->ysize = 16
s->current_channel_offset = 5
td->channel_line_size = s->current_channel_offset * td->xsize = 4000
uncompressed_size = td->channel_line_size * td->ysize = 64000

s->nb_channels = 3

p s->channels[0].pixel_type = EXR_HALF
expected_len = td->xsize * td->ysize * 2 = 25600

p s->channels[1].pixel_type = EXR_UINT
expected_len = expected_len + td->xsize * td->ysize * 4 = 76800

p s->channels[2].pixel_type = EXR_HALF
expected_len = expected_len + td->xsize * td->ysize * 2 = 102400

=> expected_len > uncompressed_size

> Did you have a test sample ?

Yes.

Best regards,
Andreas