mirror of
https://github.com/FFmpeg/FFmpeg.git
synced 2024-12-23 12:43:46 +02:00
proresdec: Fix read via negative index in a global array.
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
parent
e39487efe3
commit
0065080320
@ -302,7 +302,7 @@ static av_always_inline void decode_dc_coeffs(GetBitContext *gb, DCTELEM *out,
|
|||||||
code = 5;
|
code = 5;
|
||||||
sign = 0;
|
sign = 0;
|
||||||
for (i = 1; i < blocks_per_slice; i++, out += 64) {
|
for (i = 1; i < blocks_per_slice; i++, out += 64) {
|
||||||
DECODE_CODEWORD(code, dc_codebook[FFMIN(code, 6)]);
|
DECODE_CODEWORD(code, dc_codebook[FFMIN(code, 6U)]);
|
||||||
if(code) sign ^= -(code & 1);
|
if(code) sign ^= -(code & 1);
|
||||||
else sign = 0;
|
else sign = 0;
|
||||||
prev_dc += (((code + 1) >> 1) ^ sign) - sign;
|
prev_dc += (((code + 1) >> 1) ^ sign) - sign;
|
||||||
|
Loading…
Reference in New Issue
Block a user