Mercurial > libavcodec.hg

changeset 2807:3137aae854c9 libavcodec

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Fix for overflow issue in mpegvideo.c patch by (Martin Boehme: boehme, inb uni-luebeck de) this integer overflow might lead to the execution of arbitrary code during encoding with threads
author michael
date Mon, 25 Jul 2005 23:07:27 +0000
parents af3a36e20010
children 932ec96933f5
files mpegvideo.c
diffstat 1 files changed, 2 insertions(+), 2 deletions(-) [+]
line wrap: on
line diff
--- a/mpegvideo.c	Mon Jul 25 14:35:01 2005 +0000
+++ b/mpegvideo.c	Mon Jul 25 23:07:27 2005 +0000
@@ -2316,8 +2316,8 @@
         int start_y= s->thread_context[i]->start_mb_y;
         int   end_y= s->thread_context[i]->  end_mb_y;
         int h= s->mb_height;
-        uint8_t *start= buf + buf_size*start_y/h;
-        uint8_t *end  = buf + buf_size*  end_y/h;
+        uint8_t *start= buf + (size_t)(((int64_t) buf_size)*start_y/h);
+        uint8_t *end  = buf + (size_t)(((int64_t) buf_size)*  end_y/h);
 
         init_put_bits(&s->thread_context[i]->pb, start, end - start);
     }