[FFmpeg-cvslog] avfilter/vf_avgblur: fix heap-buffer overflow

Paul B Mahol git at videolan.org
Thu May 5 00:09:30 EEST 2022


ffmpeg | branch: release/3.2 | Paul B Mahol <onemda at gmail.com> | Tue Oct 15 16:31:15 2019 +0200| [ff93d6f710fa95476e0e90dec6cb1303afe26e0f] | committer: Michael Niedermayer

avfilter/vf_avgblur: fix heap-buffer overflow

Fixes #8274

(cherry picked from commit f069a9c2a65bc20c3462127623127df6dfd06c5b)
Signed-off-by: Michael Niedermayer <michael at niedermayer.cc>

> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=ff93d6f710fa95476e0e90dec6cb1303afe26e0f
---

 libavfilter/vf_avgblur.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libavfilter/vf_avgblur.c b/libavfilter/vf_avgblur.c
index 2bb2ab1ed5..b96e5a7868 100644
--- a/libavfilter/vf_avgblur.c
+++ b/libavfilter/vf_avgblur.c
@@ -149,7 +149,7 @@ static int filter_vertically_##name(AVFilterContext *ctx, void *arg, int jobnr,
                                                                                               \
         src = s->buffer + x;                                                                  \
         ptr = buffer + x;                                                                     \
-        for (i = 0; i <= radius; i++) {                                                       \
+        for (i = 0; i + radius < height && i <= radius; i++) {                                \
             acc += src[(i + radius) * width];                                                 \
             count++;                                                                          \
             ptr[i * linesize] = acc / count;                                                  \



More information about the ffmpeg-cvslog mailing list