From c411e90bc3f191c75cb9e249e6ae27fd28894d2c Mon Sep 17 00:00:00 2001 From: Benjamin Steffes Date: Thu, 17 Mar 2016 23:10:00 +0100 Subject: Fix start_frame handling in detelecine filter Signed-off-by: Benjamin Steffes Signed-off-by: Michael Niedermayer --- libavfilter/vf_detelecine.c | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/libavfilter/vf_detelecine.c b/libavfilter/vf_detelecine.c index 16230f1abd..639a3916e7 100644 --- a/libavfilter/vf_detelecine.c +++ b/libavfilter/vf_detelecine.c @@ -37,6 +37,7 @@ typedef struct { int first_field; char *pattern; int start_frame; + int init_len; unsigned int pattern_pos; unsigned int nskip_fields; int64_t start_time; @@ -74,6 +75,7 @@ static av_cold int init(AVFilterContext *ctx) DetelecineContext *s = ctx->priv; const char *p; int max = 0; + int sum = 0; if (!strlen(s->pattern)) { av_log(ctx, AV_LOG_ERROR, "No pattern provided.\n"); @@ -86,14 +88,21 @@ static av_cold int init(AVFilterContext *ctx) return AVERROR_INVALIDDATA; } + sum += *p - '0'; max = FFMAX(*p - '0', max); s->pts.num += *p - '0'; s->pts.den += 2; } + if (s->start_frame >= sum) { + av_log(ctx, AV_LOG_ERROR, "Provided start_frame is too big.\n"); + return AVERROR_INVALIDDATA; + } + s->nskip_fields = 0; s->pattern_pos = 0; s->start_time = AV_NOPTS_VALUE; + s->init_len = 0; if (s->start_frame != 0) { int nfields = 0; @@ -101,7 +110,7 @@ static av_cold int init(AVFilterContext *ctx) nfields += *p - '0'; s->pattern_pos++; if (nfields >= 2*s->start_frame) { - s->nskip_fields = nfields - 2*s->start_frame; + s->init_len = nfields - 2*s->start_frame; break; } } @@ -211,6 +220,8 @@ static int filter_frame(AVFilterLink *inlink, AVFrame *inpicref) } if (s->nskip_fields == 0) { + len = s->init_len; + s->init_len = 0; while(!len && s->pattern[s->pattern_pos]) { len = s->pattern[s->pattern_pos] - '0'; s->pattern_pos++; -- cgit v1.2.3