avcodec/smc: fix off by 1 error
Fixes out of array access
Fixes: asan_heap-oob_1685bf0_5_asan_heap-oob_1f35116_430_smc.mov
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit c727401aa9)
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
			
			
This commit is contained in:
		@@ -68,7 +68,7 @@ typedef struct SmcContext {
 | 
				
			|||||||
        row_ptr += stride * 4; \
 | 
					        row_ptr += stride * 4; \
 | 
				
			||||||
    } \
 | 
					    } \
 | 
				
			||||||
    total_blocks--; \
 | 
					    total_blocks--; \
 | 
				
			||||||
    if (total_blocks < 0) \
 | 
					    if (total_blocks < 0 + !!n_blocks) \
 | 
				
			||||||
    { \
 | 
					    { \
 | 
				
			||||||
        av_log(s->avctx, AV_LOG_INFO, "warning: block counter just went negative (this should not happen)\n"); \
 | 
					        av_log(s->avctx, AV_LOG_INFO, "warning: block counter just went negative (this should not happen)\n"); \
 | 
				
			||||||
        return; \
 | 
					        return; \
 | 
				
			||||||
 
 | 
				
			|||||||
		Reference in New Issue
	
	Block a user