avcodec/pngdec: Check IHDR/IDAT order
authorMichael Niedermayer <michaelni@gmx.at>
Wed, 26 Nov 2014 13:45:47 +0000 (14:45 +0100)
committerMike Gabriel <sunweaver@debian.org>
Tue, 28 May 2019 12:14:01 +0000 (13:14 +0100)
commit6a04064f3151955b9240ab2b711a84884e967004
tree88b36437dd5a4b76cf748a0e217d4ad9776bc77b
parent9bb8c0c4fa5c85762afa0c16d2c4af135057139f
avcodec/pngdec: Check IHDR/IDAT order

avcodec/pngdec: Check IHDR/IDAT order

Fixes out of array access
Fixes: asan_heap-oob_20a6c26_2690_cov_3434532168_mail.png
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
[sunweaver] - Port this commit to libav in Debian jessie.

Gbp-Pq: Name CVE-2014-9317.patch
libavcodec/pngdec.c