1
0
mirror of https://github.com/FFmpeg/FFmpeg.git synced 2025-03-03 14:32:16 +02:00
FFmpeg/libavcodec
Steinar H. Gunderson 08b098169b speedhq: fix out-of-bounds write
Certain alpha run lengths (for SHQ1/SHQ3/SHQ5) could be stored in
both long and short versions, and we would only accept the short version,
returning -1 (invalid code) for the others. This could cause an
out-of-bounds write on malicious input, as discovered by
Andreas Cadhalpun during fuzzing.

Fix by simply allowing both versions, leaving no invalid codes
in the alpha VLC.

Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
2017-02-02 01:12:07 +01:00
..
2017-01-31 10:49:40 +01:00
2017-01-20 13:58:41 +01:00
2017-01-21 18:08:08 +01:00
2017-01-11 16:02:10 +01:00
2017-01-20 13:58:41 +01:00
2017-01-11 16:02:10 +01:00
2017-01-11 16:02:10 +01:00
2017-01-09 18:43:19 +01:00
2017-01-06 22:05:45 +01:00
2017-01-13 21:19:17 +01:00
2017-01-16 10:24:01 +01:00
2017-02-02 01:12:07 +01:00
2017-01-20 13:58:41 +01:00
2017-02-02 01:12:07 +01:00
2017-01-03 00:52:55 +01:00
2017-01-20 13:58:41 +01:00