Opened 11 years ago

Closed 11 years ago

#1314 closed defect (invalid)

[libavcodec/dv.c:976]: Array index out of bounds

Reported by: dvice_null@… Owned by: reimar
Priority: normal Component: core
Version: HEAD Severity: normal
Keywords: Cc:
Blocked By: Blocking:
Reproduced by developer: Analyzed by developer:

Description

[libavcodec/dv.c:976]: Array index out of bounds

In this line:

pb = dv_encode_ac(&enc_blks[j], pb, &pbs[6*5]);

pbs[] was initialized to size [5*6] so you are accessing one element over the limits of the array.

Change History (1)

comment:1 Changed 11 years ago by reimar

  • Resolution set to invalid
  • Status changed from new to closed

That code is part of FFmpeg, not MPlayer, so you would have to report there.
Anyway the analysis is wrong, no element is accessed by the quoted code, it only calculates a pointer to the element after the last, to be used in later bounds checks, which is allowed by C.

Note: See TracTickets for help on using tickets.