File ffmpeg-CVE-2020-20895.patch of Package ffmpeg.32836

Overview Repositories Revisions Requests Users Attributes Meta

File ffmpeg-CVE-2020-20895.patch of Package ffmpeg.32836

From f069a9c2a65bc20c3462127623127df6dfd06c5b Mon Sep 17 00:00:00 2001
From: Paul B Mahol <onemda@gmail.com>
Date: Tue, 15 Oct 2019 16:31:15 +0200
Subject: [PATCH] avfilter/vf_avgblur: fix heap-buffer overflow

Fixes #8274
---
 libavfilter/vf_avgblur.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libavfilter/vf_avgblur.c b/libavfilter/vf_avgblur.c
index 40b48799e0..78a6806e6f 100644
--- a/libavfilter/vf_avgblur.c
+++ b/libavfilter/vf_avgblur.c
@@ -148,7 +148,7 @@ static int filter_vertically_##name(AVFilterContext *ctx, void *arg, int jobnr,
                                                                                               \
         src = s->buffer + x;                                                                  \
         ptr = buffer + x;                                                                     \
-        for (i = 0; i <= radius; i++) {                                                       \
+        for (i = 0; i + radius < height && i <= radius; i++) {                                \
             acc += src[(i + radius) * width];                                                 \
             count++;                                                                          \
             ptr[i * linesize] = acc / count;                                                  \
-- 
2.33.0

Places

File ffmpeg-CVE-2020-20895.patch of Package ffmpeg.32836

Places