projects / libav.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6facdee) | patch
avcodec/jpeg2000dwt: Check ndeclevels before calling dwt_decode*()
authorMichael Niedermayer <michael@niedermayer.cc>
Fri, 27 Nov 2015 18:52:39 +0000 (19:52 +0100)
committerMike Gabriel <sunweaver@debian.org>
Thu, 20 Dec 2018 21:56:40 +0000 (21:56 +0000)
commit745736ea0fdf9f62a97ccdd8130dfe559e5d3b85
tree55129aaec428a2fe21e4276e4d9ccc14f6b6186dtree | snapshot
parent6facdeecc96c64fde420c0931bf1f80a4bf8f8eecommit | diff
avcodec/jpeg2000dwt: Check ndeclevels before calling dwt_decode*()

avcodec/jpeg2000dwt: Check ndeclevels before calling dwt_decode*()

Fixes out of array access
Fixes: 01859c9a9ac6cd60a008274123275574/asan_heap-oob_1dff571_8250_50d3d1611e294c3519fd1fa82198b69b.avi
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Gbp-Pq: Name CVE-2015-8662.patch
libavcodec/jpeg2000dwt.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.