From 21c52af2b388d3132e92dd6b536751cecc88a6c6 Mon Sep 17 00:00:00 2001 From: Michael Smith Date: Mon, 27 Apr 2009 22:42:55 -0700 Subject: [PATCH] theoradec: fix buffer overrun on 422 decode. --- ext/theora/theoradec.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ext/theora/theoradec.c b/ext/theora/theoradec.c index 7494139016..bd89b2a8cc 100644 --- a/ext/theora/theoradec.c +++ b/ext/theora/theoradec.c @@ -1219,7 +1219,7 @@ theora_handle_422_image (GstTheoraDec * dec, yuv_buffer * yuv, GstBuffer ** out) curdest = dest + 1; src = src_cb; - for (j = 0; j < width; j++) { + for (j = 0; j < width / 2; j++) { *curdest = *src++; curdest += 4; } @@ -1227,7 +1227,7 @@ theora_handle_422_image (GstTheoraDec * dec, yuv_buffer * yuv, GstBuffer ** out) curdest = dest + 3; src = src_cr; - for (j = 0; j < width; j++) { + for (j = 0; j < width / 2; j++) { *curdest = *src++; curdest += 4; }