[MPlayer-cvslog] r22204 - trunk/loader/dmo/DMO_VideoDecoder.c

rtogni subversion at mplayerhq.hu
Sun Feb 11 18:55:49 CET 2007


Author: rtogni
Date: Sun Feb 11 18:55:49 2007
New Revision: 22204

Modified:
   trunk/loader/dmo/DMO_VideoDecoder.c

Log:
Precent overflow of this->m_sVhdr->bmiHeader buffer, may have been 
exploitable.
Reported by Moritz Jodeit


Modified: trunk/loader/dmo/DMO_VideoDecoder.c
==============================================================================
--- trunk/loader/dmo/DMO_VideoDecoder.c	(original)
+++ trunk/loader/dmo/DMO_VideoDecoder.c	Sun Feb 11 18:55:49 2007
@@ -119,6 +119,7 @@
      
         this->iv.m_bh = malloc(bihs);
         memcpy(this->iv.m_bh, format, bihs);
+        this->iv.m_bh->biSize = bihs;
 
         this->iv.m_State = STOP;
         //this->iv.m_pFrame = 0;



More information about the MPlayer-cvslog mailing list