[FFmpeg-devel] [PATCH 6/7] Prevent out of bound accesses in the xan decoder.

[Laurent Aimar]

Hi,

On Tue, Sep 27, 2011 at 11:43:56PM +0200, fenrir at elivagar.org wrote:
> -    if (imagedata_segment[0] == 2)
> +    if (imagedata_segment[0] == 2) {
>          xan_unpack(s->buffer2, &imagedata_segment[1], s->buffer2_size);
> -    else
> +        imagedata_size = s->buffer2_size;
> +    } else {
> +        imagedata_size = s->size - imagedata_offset;
>          imagedata_buffer = &imagedata_segment[1];
> +    }
 I didn't take the &[1] into account. The attached patch fix that.

-- 
fenrir
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Prevent-out-of-bound-accesses-in-the-xan-decoder.patch
Type: text/x-diff
Size: 3723 bytes
Desc: not available
URL: <http://ffmpeg.org/pipermail/ffmpeg-devel/attachments/20110927/f2451941/attachment.bin>