You've already forked FFmpeg
							
							
				mirror of
				https://github.com/FFmpeg/FFmpeg.git
				synced 2025-10-30 23:18:11 +02:00 
			
		
		
		
	avcodec/jpeg2000dec: Port tile size check from j2kdec
Fixes potential integer overflow Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
		| @@ -192,6 +192,9 @@ static int get_siz(Jpeg2000DecoderContext *s) | ||||
|     s->numXtiles = ff_jpeg2000_ceildiv(s->width  - s->tile_offset_x, s->tile_width); | ||||
|     s->numYtiles = ff_jpeg2000_ceildiv(s->height - s->tile_offset_y, s->tile_height); | ||||
|  | ||||
|     if(s->numXtiles * (uint64_t)s->numYtiles > INT_MAX/sizeof(Jpeg2000Tile)) | ||||
|         return AVERROR(EINVAL); | ||||
|  | ||||
|     s->tile = av_mallocz(s->numXtiles * s->numYtiles * sizeof(*s->tile)); | ||||
|     if (!s->tile) | ||||
|         return AVERROR(ENOMEM); | ||||
|   | ||||
		Reference in New Issue
	
	Block a user