Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(155)

Unified Diff: chromium/patches/from_upstream/51_vp3_coefficient_overflow.patch

Issue 9290059: Initial commit of all previous Chrome build scripts. (Closed) Base URL: http://git.chromium.org/chromium/third_party/ffmpeg.git@master
Patch Set: Drop deprecated subfolder. Created 8 years, 11 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: chromium/patches/from_upstream/51_vp3_coefficient_overflow.patch
diff --git a/chromium/patches/from_upstream/51_vp3_coefficient_overflow.patch b/chromium/patches/from_upstream/51_vp3_coefficient_overflow.patch
new file mode 100644
index 0000000000000000000000000000000000000000..a507a51ed70d6996e9f3dbc74bb9539a7e67a8ec
--- /dev/null
+++ b/chromium/patches/from_upstream/51_vp3_coefficient_overflow.patch
@@ -0,0 +1,15 @@
+diff --git a/libavcodec/vp3.c b/libavcodec/vp3.c
+index 549f494..2f07af8 100644
+--- a/libavcodec/vp3.c
++++ b/libavcodec/vp3.c
+@@ -1308,6 +1308,10 @@ static inline int vp3_dequant(Vp3DecodeContext *s, Vp3Fragment *frag,
+ case 1: // zero run
+ s->dct_tokens[plane][i]++;
+ i += (token >> 2) & 0x7f;
++ if(i>63){
++ av_log(s->avctx, AV_LOG_ERROR, "Coefficient index overflow\n");
++ return -1;
++ }
+ block[perm[i]] = (token >> 9) * dequantizer[perm[i]];
+ i++;
+ break;

Powered by Google App Engine
This is Rietveld 408576698