summaryrefslogtreecommitdiff
path: root/libavcodec/vc1.h
diff options
context:
space:
mode:
authorMichael Niedermayer <michaelni@gmx.at>2012-11-16 00:48:15 +0100
committerMartin Storsjö <martin@martin.st>2013-05-15 12:13:53 +0300
commit4162fc62b30d5b57910c17e46f2a9319a09cdae0 (patch)
treee0b1e986b98ed70474759a188d3633a0bac50c79 /libavcodec/vc1.h
parentec7d002e55590bf9e2c2745065ec3463364a5273 (diff)
vc1dec: Do not allow field_mode to change after the first header
This fixes out of array accesses. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Martin Storsjö <martin@martin.st>
Diffstat (limited to 'libavcodec/vc1.h')
-rw-r--r--libavcodec/vc1.h1
1 files changed, 1 insertions, 0 deletions
diff --git a/libavcodec/vc1.h b/libavcodec/vc1.h
index 6f24c0e4af..88980d49a6 100644
--- a/libavcodec/vc1.h
+++ b/libavcodec/vc1.h
@@ -372,6 +372,7 @@ typedef struct VC1Context{
int qs_last; ///< if qpel has been used in the previous (tr.) picture
int bmvtype;
int frfd, brfd; ///< reference frame distance (forward or backward)
+ int first_pic_header_flag;
int pic_header_flag;
/** Frame decoding info for sprite modes */