g2meet: Allocate cursor buffers large enough to fit the aligned width
Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org Signed-off-by: Martin Storsjö <martin@martin.st>
This commit is contained in:
		@@ -488,7 +488,7 @@ static int g2m_load_cursor(AVCodecContext *avctx, G2MContext *c,
 | 
			
		||||
    cursor_hot_y  = bytestream2_get_byte(gb);
 | 
			
		||||
    cursor_fmt    = bytestream2_get_byte(gb);
 | 
			
		||||
 | 
			
		||||
    cursor_stride = cursor_w * 4;
 | 
			
		||||
    cursor_stride = FFALIGN(cursor_w, 32) * 4;
 | 
			
		||||
 | 
			
		||||
    if (cursor_w < 1 || cursor_w > 256 ||
 | 
			
		||||
        cursor_h < 1 || cursor_h > 256) {
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user