From 0ca15aa066f1fad20853f5a560f13688d095ea81 Mon Sep 17 00:00:00 2001 From: Stefano Sabatini Date: Sun, 18 Mar 2012 16:42:32 +0100 Subject: lavc/jpeglsenc: fix allocation in case of negative linesize, and add malloc check Fix crash with negative linesizes, fix trac ticket #1078. --- libavcodec/jpeglsenc.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'libavcodec/jpeglsenc.c') diff --git a/libavcodec/jpeglsenc.c b/libavcodec/jpeglsenc.c index 62a2328a0a..aff1c6dd82 100644 --- a/libavcodec/jpeglsenc.c +++ b/libavcodec/jpeglsenc.c @@ -295,7 +295,9 @@ static int encode_picture_ls(AVCodecContext *avctx, AVPacket *pkt, ls_store_lse(state, &pb); - zero = av_mallocz(p->linesize[0]); + zero = av_mallocz(FFABS(p->linesize[0])); + if (!zero) + return AVERROR(ENOMEM); last = zero; cur = p->data[0]; if(avctx->pix_fmt == PIX_FMT_GRAY8){ -- cgit v1.2.3