1
0
mirror of https://github.com/FFmpeg/FFmpeg.git synced 2025-08-15 14:13:16 +02:00

wmalosslessdec: make MCLMS arrays big enough for what is written into them.

Fixes a part of CVE-2012-2795

CC:libav-stable@libav.org

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Anton Khirnov <anton@khirnov.net>
This commit is contained in:
Michael Niedermayer
2012-04-14 14:49:22 +02:00
committed by Anton Khirnov
parent ae3da0ae55
commit 607f57152c

View File

@@ -129,8 +129,8 @@ typedef struct WmallDecodeCtx {
int8_t mclms_scaling; int8_t mclms_scaling;
int16_t mclms_coeffs[128]; int16_t mclms_coeffs[128];
int16_t mclms_coeffs_cur[4]; int16_t mclms_coeffs_cur[4];
int16_t mclms_prevvalues[64]; int16_t mclms_prevvalues[WMALL_MAX_CHANNELS * 2 * 32];
int16_t mclms_updates[64]; int16_t mclms_updates[WMALL_MAX_CHANNELS * 2 * 32];
int mclms_recent; int mclms_recent;
int movave_scaling; int movave_scaling;