Mercurial > mplayer.hg
comparison loader/dmo/DMO_VideoDecoder.c @ 22186:c6edb6c59a7a
Precent overflow of this->m_sVhdr->bmiHeader buffer, may have been
exploitable.
Reported by Moritz Jodeit
author | rtogni |
---|---|
date | Sun, 11 Feb 2007 17:55:49 +0000 |
parents | 2934974c366a |
children | b99edbf76db4 |
comparison
equal
deleted
inserted
replaced
22185:80ff3962cef4 | 22186:c6edb6c59a7a |
---|---|
117 bihs = (format->biSize < (int) sizeof(BITMAPINFOHEADER)) ? | 117 bihs = (format->biSize < (int) sizeof(BITMAPINFOHEADER)) ? |
118 sizeof(BITMAPINFOHEADER) : format->biSize; | 118 sizeof(BITMAPINFOHEADER) : format->biSize; |
119 | 119 |
120 this->iv.m_bh = malloc(bihs); | 120 this->iv.m_bh = malloc(bihs); |
121 memcpy(this->iv.m_bh, format, bihs); | 121 memcpy(this->iv.m_bh, format, bihs); |
122 this->iv.m_bh->biSize = bihs; | |
122 | 123 |
123 this->iv.m_State = STOP; | 124 this->iv.m_State = STOP; |
124 //this->iv.m_pFrame = 0; | 125 //this->iv.m_pFrame = 0; |
125 this->iv.m_Mode = DIRECT; | 126 this->iv.m_Mode = DIRECT; |
126 this->iv.m_iDecpos = 0; | 127 this->iv.m_iDecpos = 0; |