[FFmpeg-devel] sws_scale function exception access

[Michael Niedermayer]

On Tue, Mar 17, 2020 at 11:13:22AM +0800, BYHYKCHKIO WEIINZWLM wrote:
> Hello,
> 
> I have a vulnerability about FFmpage to report.
> 
> Regarding the sws_scale function in the swscale.c file, when the parameter
> SwsContext is 0, the program access address is abnormal, causing the
> program to crash.

sws_scale() documents the SwsContext parameter as
"the scaling context previously created ..."

0 is not a scaling context.
So if you pass 0 as context your code is buggy.
If other code does that then that code is buggy.

Thanks


[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

Opposition brings concord. Out of discord comes the fairest harmony.
-- Heraclitus
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: not available
URL: <https://ffmpeg.org/pipermail/ffmpeg-devel/attachments/20200317/c7ef7e85/attachment.sig>