Permalink
Browse files

Fix reading past the end of frame buffer.

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
  • Loading branch information...
1 parent bd92205 commit d70231f02d06c551b99db61962812ffda2438f12 Boris Maksalov committed with michaelni Aug 10, 2012
Showing with 6 additions and 6 deletions.
  1. +6 −6 libavcodec/proresenc_kostya.c
View
12 libavcodec/proresenc_kostya.c
@@ -254,24 +254,24 @@ static void get_slice_data(ProresContext *ctx, const uint16_t *src,
ctx->dsp.fdct(esrc, elinesize, blocks);
blocks += 64;
if (blocks_per_mb > 2) {
- ctx->dsp.fdct(src + 8, linesize, blocks);
+ ctx->dsp.fdct(esrc + 8, elinesize, blocks);
blocks += 64;
}
- ctx->dsp.fdct(src + linesize * 4, linesize, blocks);
+ ctx->dsp.fdct(esrc + elinesize * 4, elinesize, blocks);
blocks += 64;
if (blocks_per_mb > 2) {
- ctx->dsp.fdct(src + linesize * 4 + 8, linesize, blocks);
+ ctx->dsp.fdct(esrc + elinesize * 4 + 8, elinesize, blocks);
blocks += 64;
}
} else {
ctx->dsp.fdct(esrc, elinesize, blocks);
blocks += 64;
- ctx->dsp.fdct(src + linesize * 4, linesize, blocks);
+ ctx->dsp.fdct(esrc + elinesize * 4, elinesize, blocks);
blocks += 64;
if (blocks_per_mb > 2) {
- ctx->dsp.fdct(src + 8, linesize, blocks);
+ ctx->dsp.fdct(esrc + 8, elinesize, blocks);
blocks += 64;
- ctx->dsp.fdct(src + linesize * 4 + 8, linesize, blocks);
+ ctx->dsp.fdct(esrc + elinesize * 4 + 8, elinesize, blocks);
blocks += 64;
}
}

0 comments on commit d70231f

Please sign in to comment.