[FFmpeg-devel] [PATCH] Don't read out-of-bounds values for vc1

[Eli Chen]

I've encountered an out of bounds read seg fault in the vc1 codec
Apparently there were some fixes in other codecs, but wasn't applied to
vc1.  Please see attached patch.

==18859== Invalid read of size 1
==18859== at 0x4272F36: put_no_rnd_vc1_chroma_mc8_c (dsputil.c:1693)
==18859== Address 0x9208950 is 0 bytes after a block of size 230,416 alloc'd

==18859== at 0x4021D52: memalign (vg_replace_malloc.c:460)
==18859== by 0x466D5A0: av_malloc (mem.c:61)

Regards,
Eli Chen
-------------- next part --------------
A non-text attachment was scrubbed...
Name: vc1.patch
Type: application/octet-stream
Size: 2505 bytes
Desc: not available
URL: <http://lists.mplayerhq.hu/pipermail/ffmpeg-devel/attachments/20090602/2247c4ba/attachment.obj>