[FFmpeg-devel] [PATCH] mpegpicture: use coded_width/coded_height to allocate frame

[Andreas Cadhalpun]

On 25.11.2016 02:59, Michael Niedermayer wrote:
> On Fri, Nov 25, 2016 at 02:26:24AM +0100, Andreas Cadhalpun wrote:
>>  mss2.c |    8 +++++++-
>>  1 file changed, 7 insertions(+), 1 deletion(-)
>> 958ee0811485404a0662a1540fcb8b131423947b  0001-mss2-only-use-error-correction-for-matching-block-co.patch
>> From 6d8b5136c67f3a8cb3f4a4c818f311d748bbab5d Mon Sep 17 00:00:00 2001
>> From: Andreas Cadhalpun <Andreas.Cadhalpun at googlemail.com>
>> Date: Thu, 24 Nov 2016 23:57:46 +0100
>> Subject: [PATCH] mss2: only use error correction for matching block counts
>>
>> This fixes a heap-buffer-overflow in ff_er_frame_end when decoding mss2
>> with coded_width/coded_height larger than width/height.
>>
>> Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun at googlemail.com>
>> ---
>>  libavcodec/mss2.c | 8 +++++++-
>>  1 file changed, 7 insertions(+), 1 deletion(-)
> 
> LGTM

Pushed.

Best regards,
Andreas