diff options
| author | Andreas Rheinhardt <andreas.rheinhardt@outlook.com> | 2022-09-29 01:45:23 +0200 |
|---|---|---|
| committer | Andreas Rheinhardt <andreas.rheinhardt@outlook.com> | 2022-10-04 18:01:03 +0200 |
| commit | 042c1966da4dfb95a3d8adc3358d16bb99a21282 (patch) | |
| tree | 2870725335214377acc9608c9d93ec8391bfa019 /libavcodec/pngdec.c | |
| parent | 04196852a2761b6e1d751570ef31d3a6495fd8bd (diff) | |
| download | ffmpeg-042c1966da4dfb95a3d8adc3358d16bb99a21282.tar.gz | |
avcodec/pngdec: Don't use unsigned for width, height
Otherwise p->linesize[0] * y will be evaluated as an unsigned
which leads to segfaults in case linesize is negative.
This happens in the apng-dispose-previous FATE-test in case
one makes get_buffer return pictures with negative linesizes.
Signed-off-by: Andreas Rheinhardt <andreas.rheinhardt@outlook.com>
Diffstat (limited to 'libavcodec/pngdec.c')
| -rw-r--r-- | libavcodec/pngdec.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libavcodec/pngdec.c b/libavcodec/pngdec.c index 582953d17b..3c3eca601e 100644 --- a/libavcodec/pngdec.c +++ b/libavcodec/pngdec.c @@ -1387,7 +1387,7 @@ exit_loop: if (s->has_trns && s->color_type != PNG_COLOR_TYPE_PALETTE) { size_t byte_depth = s->bit_depth > 8 ? 2 : 1; size_t raw_bpp = s->bpp - byte_depth; - unsigned x, y; + ptrdiff_t x, y; av_assert0(s->bit_depth > 1); |