Commit 9b0d44ef authored by Michael Niedermayer's avatar Michael Niedermayer
Browse files

Do not attempt to use the unscaled yuv2rgb converter when height is odd because

it will overflow the buffer by 1 line. This might have been exploitable.

Originally committed as revision 27826 to svn://
parent c87348a9
......@@ -2312,7 +2312,7 @@ SwsContext *sws_getContext(int srcW, int srcH, enum PixelFormat srcFormat, int d
/* yuv2bgr */
if ((srcFormat==PIX_FMT_YUV420P || srcFormat==PIX_FMT_YUV422P) && (isBGR(dstFormat) || isRGB(dstFormat))
&& !(flags & SWS_ACCURATE_RND))
&& !(flags & SWS_ACCURATE_RND) && !(dstH&1))
c->swScale= yuv2rgb_get_func_ptr(c);
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment