-
Stefano Sabatini authored
In the loop: for (i=0; i<dstH; i++) { int chrI= i*c->chrDstH / dstH; when i*c->chrDstH > INT_MAX this leads to an integer overflow, which results in a negative value for chrI and in out-of-buffer reads. The overflow is avoided by forcing int64_t arithmetic by casting i to int64_t. Fix crash, and trac issue #72. Signed-off-by: Stefano Sabatini <stefano.sabatini-lala@poste.it>
bd2a3700
Name |
Last commit
|
Last update |
---|---|---|
.. | ||
bfin | ||
mlib | ||
ppc | ||
sparc | ||
x86 | ||
Makefile | ||
colorspace-test.c | ||
libswscale.v | ||
options.c | ||
rgb2rgb.c | ||
rgb2rgb.h | ||
rgb2rgb_template.c | ||
swscale-test.c | ||
swscale.c | ||
swscale.h | ||
swscale_internal.h | ||
swscale_template.c | ||
utils.c | ||
yuv2rgb.c |