projects / libav.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 1a8c691) | patch
ac3dec: ensure get_buffer() gets a buffer for the correct number of channels
authorJustin Ruggles <justin.ruggles@gmail.com>
Sat, 29 Sep 2012 15:31:35 +0000 (11:31 -0400)
committerJustin Ruggles <justin.ruggles@gmail.com>
Mon, 1 Oct 2012 04:10:59 +0000 (00:10 -0400)
commit56b6a43056235fc110a018678da590595734203d
treedd5a9d031ce20db52dc5920ccc73ad720f695344tree | snapshot
parent1a8c6917f68f7378465e18f7615762bfd22704c2commit | diff
ac3dec: ensure get_buffer() gets a buffer for the correct number of channels

If there is an error during frame parsing, but AVCodecContext.channels was
changed and AC3DecodeContext.out_channels was set previously, the two may not
match.

Fixes CVE-2012-2802
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind

CC: libav-stable@libav.org
libavcodec/ac3dec.c diff | blob | blame | history
Libav master