On Sun, May 03, 2015 at 08:41:35PM +0200, Andreas Cadhalpun wrote:
> On 03.05.2015 20:09, Michael Niedermayer wrote:
> > On Sun, May 03, 2015 at 05:11:17PM +0200, Andreas Cadhalpun wrote:
> >> In this case ptr could be set to a position outside the image_buf in
> >> png_handle_row, leading to memor
On Sun, May 03, 2015 at 05:11:17PM +0200, Andreas Cadhalpun wrote:
> In this case ptr could be set to a position outside the image_buf in
> png_handle_row, leading to memory corruption and thus crashes.
>
> Signed-off-by: Andreas Cadhalpun
> ---
> libavcodec/pngdec.c | 6 ++
> 1 file changed
In this case ptr could be set to a position outside the image_buf in
png_handle_row, leading to memory corruption and thus crashes.
Signed-off-by: Andreas Cadhalpun
---
libavcodec/pngdec.c | 6 ++
1 file changed, 6 insertions(+)
diff --git a/libavcodec/pngdec.c b/libavcodec/pngdec.c
index 2
