From d70231f02d06c551b99db61962812ffda2438f12 Mon Sep 17 00:00:00 2001 From: Boris Maksalov Date: Fri, 10 Aug 2012 09:50:35 +0100 Subject: Fix reading past the end of frame buffer. Signed-off-by: Michael Niedermayer --- libavcodec/proresenc_kostya.c | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) (limited to 'libavcodec/proresenc_kostya.c') diff --git a/libavcodec/proresenc_kostya.c b/libavcodec/proresenc_kostya.c index bffc2e7d65..a0feed90ca 100644 --- a/libavcodec/proresenc_kostya.c +++ b/libavcodec/proresenc_kostya.c @@ -254,24 +254,24 @@ static void get_slice_data(ProresContext *ctx, const uint16_t *src, ctx->dsp.fdct(esrc, elinesize, blocks); blocks += 64; if (blocks_per_mb > 2) { - ctx->dsp.fdct(src + 8, linesize, blocks); + ctx->dsp.fdct(esrc + 8, elinesize, blocks); blocks += 64; } - ctx->dsp.fdct(src + linesize * 4, linesize, blocks); + ctx->dsp.fdct(esrc + elinesize * 4, elinesize, blocks); blocks += 64; if (blocks_per_mb > 2) { - ctx->dsp.fdct(src + linesize * 4 + 8, linesize, blocks); + ctx->dsp.fdct(esrc + elinesize * 4 + 8, elinesize, blocks); blocks += 64; } } else { ctx->dsp.fdct(esrc, elinesize, blocks); blocks += 64; - ctx->dsp.fdct(src + linesize * 4, linesize, blocks); + ctx->dsp.fdct(esrc + elinesize * 4, elinesize, blocks); blocks += 64; if (blocks_per_mb > 2) { - ctx->dsp.fdct(src + 8, linesize, blocks); + ctx->dsp.fdct(esrc + 8, elinesize, blocks); blocks += 64; - ctx->dsp.fdct(src + linesize * 4 + 8, linesize, blocks); + ctx->dsp.fdct(esrc + elinesize * 4 + 8, elinesize, blocks); blocks += 64; } } -- cgit v1.2.3