[FFmpeg-devel] [PATCH] Fix segv when decoding gray8

Baptiste Coudurier baptiste.coudurier
Thu Jun 3 03:39:26 CEST 2010


Hi guys,

$subject.

frame->data[1] is set by avpicture_fill which is called with buf passed 
from the demuxer.
However, for gray8 the data stored is only width*height, so is too small 
for the palette, and will segv, memcpying.

I'm not sure what is the right fix here, buf is supposed to be const.

-- 
Baptiste COUDURIER
Key fingerprint                 8D77134D20CC9220201FC5DB0AC9325C5C1ABAAA
FFmpeg maintainer                                  http://www.ffmpeg.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: rawdec_gray8_segv.patch
Type: text/x-patch
Size: 619 bytes
Desc: not available
URL: <http://lists.mplayerhq.hu/pipermail/ffmpeg-devel/attachments/20100602/f9fa35d4/attachment.bin>



More information about the ffmpeg-devel mailing list