comparison loader/dshow/DS_VideoDecoder.c @ 22187:88b36fd17976

Precent overflow of this->m_sVhdr->bmiHeader buffer, may have been exploitable.
author rtogni
date Sun, 11 Feb 2007 17:57:02 +0000
parents 2934974c366a
children 254733f57707
comparison
equal deleted inserted replaced
22186:c6edb6c59a7a 22187:88b36fd17976
112 bihs = (format->biSize < (int) sizeof(BITMAPINFOHEADER)) ? 112 bihs = (format->biSize < (int) sizeof(BITMAPINFOHEADER)) ?
113 sizeof(BITMAPINFOHEADER) : format->biSize; 113 sizeof(BITMAPINFOHEADER) : format->biSize;
114 114
115 this->iv.m_bh = malloc(bihs); 115 this->iv.m_bh = malloc(bihs);
116 memcpy(this->iv.m_bh, format, bihs); 116 memcpy(this->iv.m_bh, format, bihs);
117 this->iv.m_bh->biSize = bihs;
117 118
118 this->iv.m_State = STOP; 119 this->iv.m_State = STOP;
119 //this->iv.m_pFrame = 0; 120 //this->iv.m_pFrame = 0;
120 this->iv.m_Mode = DIRECT; 121 this->iv.m_Mode = DIRECT;
121 this->iv.m_iDecpos = 0; 122 this->iv.m_iDecpos = 0;