virtualenv/FFmpeg
1
0
Fork 0
mirror of https://github.com/FFmpeg/FFmpeg.git synced 2024-12-23 12:43:46 +02:00
Code Issues Releases Activity

tests/tiny_ssim: check dimensions

Browse Source 
Fix integer overflow

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
Michael Niedermayer 2014-05-05 18:39:30 +02:00
parent 78d3453c4a
commit a69e16a97e
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
tests/tiny_ssim.c
View File

@ -29,6 +29,7 @@
#include "config.h" #include "config.h"
#include <inttypes.h> #include <inttypes.h>
#include <limits.h>
#include <math.h> #include <math.h>
#include <stdio.h> #include <stdio.h>
#include <stdlib.h> #include <stdlib.h>
@ -195,7 +196,13 @@ int main(int argc, char* argv[])
f[0] = fopen(argv[1], "rb"); f[0] = fopen(argv[1], "rb");
f[1] = fopen(argv[2], "rb"); f[1] = fopen(argv[2], "rb");
sscanf(argv[3], "%dx%d", &w, &h); sscanf(argv[3], "%dx%d", &w, &h);
frame_size = w*h*3/2;
if (w<=0 || h<=0 || w*(int64_t)h >= INT_MAX/3 || 2LL*w+12 >= INT_MAX / sizeof(*temp)) {
fprintf(stderr, "Dimensions are too large\n");
return -2;
}
frame_size = w*h*3LL/2;
for( i=0; i<2; i++ ) for( i=0; i<2; i++ )
{ {
buf[i] = malloc(frame_size); buf[i] = malloc(frame_size);