comparison loader/dmo/DMO_VideoDecoder.c @ 22186:c6edb6c59a7a

Precent overflow of this->m_sVhdr->bmiHeader buffer, may have been exploitable. Reported by Moritz Jodeit
author rtogni
date Sun, 11 Feb 2007 17:55:49 +0000
parents 2934974c366a
children b99edbf76db4
comparison
equal deleted inserted replaced
22185:80ff3962cef4 22186:c6edb6c59a7a
117 bihs = (format->biSize < (int) sizeof(BITMAPINFOHEADER)) ? 117 bihs = (format->biSize < (int) sizeof(BITMAPINFOHEADER)) ?
118 sizeof(BITMAPINFOHEADER) : format->biSize; 118 sizeof(BITMAPINFOHEADER) : format->biSize;
119 119
120 this->iv.m_bh = malloc(bihs); 120 this->iv.m_bh = malloc(bihs);
121 memcpy(this->iv.m_bh, format, bihs); 121 memcpy(this->iv.m_bh, format, bihs);
122 this->iv.m_bh->biSize = bihs;
122 123
123 this->iv.m_State = STOP; 124 this->iv.m_State = STOP;
124 //this->iv.m_pFrame = 0; 125 //this->iv.m_pFrame = 0;
125 this->iv.m_Mode = DIRECT; 126 this->iv.m_Mode = DIRECT;
126 this->iv.m_iDecpos = 0; 127 this->iv.m_iDecpos = 0;