1
0
mirror of https://github.com/FFmpeg/FFmpeg.git synced 2025-01-19 05:49:09 +02:00
FFmpeg/libavformat
Andreas Cadhalpun bbeae2c690 jvdec: avoid unsigned overflow in comparison
The return type of strlen is size_t, i.e. unsigned, so if pd->buf_size
is 3, the right side overflows leading to a wrong result of the
comparison and subsequently a heap buffer overflow.

Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
(cherry picked from commit db374790c75fa4ef947abcb5019fcf21d0b2de85)

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
2015-11-19 03:51:39 +01:00
..
2014-12-18 00:10:35 +01:00
2015-03-06 22:26:53 +01:00
2015-02-26 02:06:10 +01:00
2015-10-09 21:44:11 +02:00
2015-03-04 23:48:41 +01:00
2015-01-30 09:33:49 +00:00
2015-07-20 04:43:39 +02:00
2014-12-18 23:27:07 +01:00
2014-12-20 00:17:43 +01:00
2015-02-21 23:37:24 +02:00
2015-01-18 00:36:56 +01:00
2015-02-04 13:10:53 +00:00
2015-02-01 20:00:10 +01:00
2015-05-15 10:04:50 +02:00
2015-01-11 00:35:01 +01:00
2015-01-11 00:35:01 +01:00