Mercurial > libavcodec.hg

diff cavsdec.c @ 6913:e716466d3665 libavcodec

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Arrays where one element too small, fixes CID114. this was possibly exploitable
author michael
date Tue, 27 May 2008 22:10:17 +0000
parents a4104482ceef
children e943e1409077
line wrap: on
line diff
--- a/cavsdec.c	Tue May 27 21:12:28 2008 +0000
+++ b/cavsdec.c	Tue May 27 22:10:17 2008 +0000
@@ -116,8 +116,8 @@
                                  const dec_2dvlc_t *r, int esc_golomb_order,
                                  int qp, uint8_t *dst, int stride) {
     int i, level_code, esc_code, level, run, mask;
-    DCTELEM level_buf[64];
-    uint8_t run_buf[64];
+    DCTELEM level_buf[65];
+    uint8_t run_buf[65];
     DCTELEM *block = h->block;
 
     for(i=0;i<65;i++) {