generic-library/vpx
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Merge "fail early on oversize frames"

Browse Source
This commit is contained in:
Johann Koenig 2017-11-09 19:50:04 +00:00 committed by Gerrit Code Review
commit bdb8b3ad86
1 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
vpx_scale/generic/yv12config.c
View File

@ -9,6 +9,7 @@
*/ */
#include <assert.h> #include <assert.h>
#include <limits.h>
#include "vpx_scale/yv12config.h" #include "vpx_scale/yv12config.h"
#include "vpx_mem/vpx_mem.h" #include "vpx_mem/vpx_mem.h"
@ -165,6 +166,12 @@ int vpx_realloc_frame_buffer(YV12_BUFFER_CONFIG *ybf, int width, int height,
uint8_t *buf = NULL; uint8_t *buf = NULL;
// frame_size is stored in buffer_alloc_sz, which is an int. If it won't
// fit, fail early.
if (frame_size > INT_MAX) {
return -1;
}
if (cb != NULL) { if (cb != NULL) {
const int align_addr_extra_size = 31; const int align_addr_extra_size = 31;
const uint64_t external_frame_size = frame_size + align_addr_extra_size; const uint64_t external_frame_size = frame_size + align_addr_extra_size;
@ -193,8 +200,6 @@ int vpx_realloc_frame_buffer(YV12_BUFFER_CONFIG *ybf, int width, int height,
vpx_free(ybf->buffer_alloc); vpx_free(ybf->buffer_alloc);
ybf->buffer_alloc = NULL; ybf->buffer_alloc = NULL;
if (frame_size != (size_t)frame_size) return -1;
ybf->buffer_alloc = (uint8_t *)vpx_memalign(32, (size_t)frame_size); ybf->buffer_alloc = (uint8_t *)vpx_memalign(32, (size_t)frame_size);
if (!ybf->buffer_alloc) return -1; if (!ybf->buffer_alloc) return -1;