[FFmpeg-devel] [PATCH] Fix mjpegdec possible crash

[Anatoly Nenashev]

Hi!
In some cases with broken mjpeg/mxpeg streams there is a problem with 
allocation of MJpegDecodeContext field named "blocks".
It is possible when encoded stream is non-progressive but SOF2 header 
marker is available in it. Thus if SOF2 header is not successfully 
decoded then s->blocks is not allocated but s->progressive is set to 1. 
So it is a reason to crash in decode_dc_progressive.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: mjpeg_crash.patch
Type: text/x-patch
Size: 624 bytes
Desc: not available
URL: <http://lists.mplayerhq.hu/pipermail/ffmpeg-devel/attachments/20101125/9922f93b/attachment.bin>