[FFmpeg-devel] [PATCH] some length validation for mjpegdec

Reimar Döffinger Reimar.Doeffinger
Fri Jul 23 18:55:17 CEST 2010


Hello,
seems like in some places we might read far beyond the get_bits
buffer and crash.
Attached is an attempt to fix it.
Some of the existing code doing such checks could be simplify
by using get_bits_left, too.

Reimar
-------------- next part --------------
A non-text attachment was scrubbed...
Name: lenval.diff
Type: text/x-diff
Size: 2583 bytes
Desc: not available
URL: <http://lists.mplayerhq.hu/pipermail/ffmpeg-devel/attachments/20100723/1a02679b/attachment.diff>



More information about the ffmpeg-devel mailing list