Commit a7fd1279 authored by Paul B Mahol's avatar Paul B Mahol

avfilter/vf_colorconstancy: fix overreads in gauss array

Fixes #8250
parent e923e620
...@@ -280,7 +280,7 @@ static int slice_get_derivative(AVFilterContext* ctx, void* arg, int jobnr, int ...@@ -280,7 +280,7 @@ static int slice_get_derivative(AVFilterContext* ctx, void* arg, int jobnr, int
dst[INDX2D(r, c, width)] = 0; dst[INDX2D(r, c, width)] = 0;
for (g = 0; g < filtersize; ++g) { for (g = 0; g < filtersize; ++g) {
dst[INDX2D(r, c, width)] += GAUSS(src, r, c + GINDX(filtersize, g), dst[INDX2D(r, c, width)] += GAUSS(src, r, c + GINDX(filtersize, g),
in_linesize, height, width, gauss[GINDX(filtersize, g)]); in_linesize, height, width, gauss[g]);
} }
} }
} }
...@@ -295,7 +295,7 @@ static int slice_get_derivative(AVFilterContext* ctx, void* arg, int jobnr, int ...@@ -295,7 +295,7 @@ static int slice_get_derivative(AVFilterContext* ctx, void* arg, int jobnr, int
dst[INDX2D(r, c, width)] = 0; dst[INDX2D(r, c, width)] = 0;
for (g = 0; g < filtersize; ++g) { for (g = 0; g < filtersize; ++g) {
dst[INDX2D(r, c, width)] += GAUSS(src, r + GINDX(filtersize, g), c, dst[INDX2D(r, c, width)] += GAUSS(src, r + GINDX(filtersize, g), c,
width, height, width, gauss[GINDX(filtersize, g)]); width, height, width, gauss[g]);
} }
} }
} }
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment