Merge "fail early on oversize frames"
This commit is contained in:
commit
bdb8b3ad86
@ -9,6 +9,7 @@
|
||||
*/
|
||||
|
||||
#include <assert.h>
|
||||
#include <limits.h>
|
||||
|
||||
#include "vpx_scale/yv12config.h"
|
||||
#include "vpx_mem/vpx_mem.h"
|
||||
@ -165,6 +166,12 @@ int vpx_realloc_frame_buffer(YV12_BUFFER_CONFIG *ybf, int width, int height,
|
||||
|
||||
uint8_t *buf = NULL;
|
||||
|
||||
// frame_size is stored in buffer_alloc_sz, which is an int. If it won't
|
||||
// fit, fail early.
|
||||
if (frame_size > INT_MAX) {
|
||||
return -1;
|
||||
}
|
||||
|
||||
if (cb != NULL) {
|
||||
const int align_addr_extra_size = 31;
|
||||
const uint64_t external_frame_size = frame_size + align_addr_extra_size;
|
||||
@ -193,8 +200,6 @@ int vpx_realloc_frame_buffer(YV12_BUFFER_CONFIG *ybf, int width, int height,
|
||||
vpx_free(ybf->buffer_alloc);
|
||||
ybf->buffer_alloc = NULL;
|
||||
|
||||
if (frame_size != (size_t)frame_size) return -1;
|
||||
|
||||
ybf->buffer_alloc = (uint8_t *)vpx_memalign(32, (size_t)frame_size);
|
||||
if (!ybf->buffer_alloc) return -1;
|
||||
|
||||
|
Loading…
x
Reference in New Issue
Block a user