[PATCH tvtime 1/2] Fix array out of bounds access in kdetv filter plugins

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



This is a read-only oob access to data on the stack, so likely harmless,
but still lets fix it.

BugLink: https://bugzilla.redhat.com/show_bug.cgi?id=876948
Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
---
 plugins/kdetv_greedyh.c    | 2 +-
 plugins/kdetv_tomsmocomp.c | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/plugins/kdetv_greedyh.c b/plugins/kdetv_greedyh.c
index c567767..f97fd6d 100644
--- a/plugins/kdetv_greedyh.c
+++ b/plugins/kdetv_greedyh.c
@@ -40,7 +40,7 @@ static void deinterlace_frame_di_greedyh( uint8_t *output, int outstride,
                                           int width, int height )
 {
     TDeinterlaceInfo Info;
-    TPicture Picture[ 8 ];
+    TPicture Picture[ MAX_PICTURE_HISTORY ];
     int stride = (width*2);
     int i;
 
diff --git a/plugins/kdetv_tomsmocomp.c b/plugins/kdetv_tomsmocomp.c
index 4f78f3e..b16cf10 100644
--- a/plugins/kdetv_tomsmocomp.c
+++ b/plugins/kdetv_tomsmocomp.c
@@ -39,7 +39,7 @@ static void deinterlace_frame_di_tomsmocomp( uint8_t *output, int outstride,
                                              int width, int height )
 {
     TDeinterlaceInfo Info;
-    TPicture Picture[ 8 ];
+    TPicture Picture[ MAX_PICTURE_HISTORY ];
     int stride = (width*2);
     int i;
 
-- 
2.7.1

--
To unsubscribe from this list: send the line "unsubscribe linux-media" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Linux Input]     [Video for Linux]     [Gstreamer Embedded]     [Mplayer Users]     [Linux USB Devel]     [Linux Audio Users]     [Linux Kernel]     [Linux SCSI]     [Yosemite Backpacking]
  Powered by Linux