# HG changeset patch # User rtogni # Date 1171216549 0 # Node ID c6edb6c59a7acb263febc7c5cfffd0763c4a1324 # Parent 80ff3962cef4d0959219ee48d721aa2bf68daf4c Precent overflow of this->m_sVhdr->bmiHeader buffer, may have been exploitable. Reported by Moritz Jodeit diff -r 80ff3962cef4 -r c6edb6c59a7a loader/dmo/DMO_VideoDecoder.c --- a/loader/dmo/DMO_VideoDecoder.c Sun Feb 11 17:54:18 2007 +0000 +++ b/loader/dmo/DMO_VideoDecoder.c Sun Feb 11 17:55:49 2007 +0000 @@ -119,6 +119,7 @@ this->iv.m_bh = malloc(bihs); memcpy(this->iv.m_bh, format, bihs); + this->iv.m_bh->biSize = bihs; this->iv.m_State = STOP; //this->iv.m_pFrame = 0;