Browse Source

svq1dec: call avcodec_set_dimensions() after dimensions changed.

Fixes NGS00148, CVE-2011-4579

Found-by: Phillip Langlois
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

(cherry picked from commit 6e24b9488e)

Signed-off-by: Reinhard Tartler <siretart@tauware.de>
tags/n0.7.9
Michael Niedermayer Reinhard Tartler 14 years ago
parent
commit
0eca0da06e
1 changed files with 1 additions and 0 deletions
  1. +1
    -0
      libavcodec/svq1dec.c

+ 1
- 0
libavcodec/svq1dec.c View File

@@ -658,6 +658,7 @@ static int svq1_decode_frame(AVCodecContext *avctx,
av_dlog(s->avctx, "Error in svq1_decode_frame_header %i\n",result);
return result;
}
avcodec_set_dimensions(avctx, s->width, s->height);

//FIXME this avoids some confusion for "B frames" without 2 references
//this should be removed after libavcodec can handle more flexible picture types & ordering


Loading…
Cancel
Save