From 4162fc62b30d5b57910c17e46f2a9319a09cdae0 Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Fri, 16 Nov 2012 00:48:15 +0100 Subject: vc1dec: Do not allow field_mode to change after the first header MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This fixes out of array accesses. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Martin Storsjö --- libavcodec/vc1.h | 1 + 1 file changed, 1 insertion(+) (limited to 'libavcodec/vc1.h') diff --git a/libavcodec/vc1.h b/libavcodec/vc1.h index 6f24c0e4af..88980d49a6 100644 --- a/libavcodec/vc1.h +++ b/libavcodec/vc1.h @@ -372,6 +372,7 @@ typedef struct VC1Context{ int qs_last; ///< if qpel has been used in the previous (tr.) picture int bmvtype; int frfd, brfd; ///< reference frame distance (forward or backward) + int first_pic_header_flag; int pic_header_flag; /** Frame decoding info for sprite modes */ -- cgit v1.2.3