[FFmpeg-cvslog] r14487 - trunk/libavcodec/rle.c

benoit subversion
Thu Jul 31 16:53:15 CEST 2008


Author: benoit
Date: Thu Jul 31 16:53:14 2008
New Revision: 14487

Log:
Fix a potential out of array writing.
Patch by Mathieu Malaterre mathieu malaterre gmail com


Modified:
   trunk/libavcodec/rle.c

Modified: trunk/libavcodec/rle.c
==============================================================================
--- trunk/libavcodec/rle.c	(original)
+++ trunk/libavcodec/rle.c	Thu Jul 31 16:53:14 2008
@@ -70,9 +70,9 @@ int ff_rle_encode(uint8_t *outbuf, int o
         } else {
             /* fall back on uncompressed */
             count = count_pixels(ptr, w-x, bpp, 0);
+            if(out + bpp*count >= outbuf + out_size) return -1;
             *out++ = (count ^ xor_raw) + add_raw;
 
-            if(out + bpp*count > outbuf + out_size) return -1;
             memcpy(out, ptr, bpp * count);
             out += bpp * count;
         }




More information about the ffmpeg-cvslog mailing list