diff mbox

[tvtime,1/2] Fix array out of bounds access in kdetv filter plugins

Message ID 1455463388-23954-1-git-send-email-hdegoede@redhat.com (mailing list archive)
State New, archived
Headers show

Commit Message

Hans de Goede Feb. 14, 2016, 3:23 p.m. UTC
This is a read-only oob access to data on the stack, so likely harmless,
but still lets fix it.

BugLink: https://bugzilla.redhat.com/show_bug.cgi?id=876948
Signed-off-by: Hans de Goede <hdegoede@redhat.com>
---
 plugins/kdetv_greedyh.c    | 2 +-
 plugins/kdetv_tomsmocomp.c | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)
diff mbox

Patch

diff --git a/plugins/kdetv_greedyh.c b/plugins/kdetv_greedyh.c
index c567767..f97fd6d 100644
--- a/plugins/kdetv_greedyh.c
+++ b/plugins/kdetv_greedyh.c
@@ -40,7 +40,7 @@  static void deinterlace_frame_di_greedyh( uint8_t *output, int outstride,
                                           int width, int height )
 {
     TDeinterlaceInfo Info;
-    TPicture Picture[ 8 ];
+    TPicture Picture[ MAX_PICTURE_HISTORY ];
     int stride = (width*2);
     int i;
 
diff --git a/plugins/kdetv_tomsmocomp.c b/plugins/kdetv_tomsmocomp.c
index 4f78f3e..b16cf10 100644
--- a/plugins/kdetv_tomsmocomp.c
+++ b/plugins/kdetv_tomsmocomp.c
@@ -39,7 +39,7 @@  static void deinterlace_frame_di_tomsmocomp( uint8_t *output, int outstride,
                                              int width, int height )
 {
     TDeinterlaceInfo Info;
-    TPicture Picture[ 8 ];
+    TPicture Picture[ MAX_PICTURE_HISTORY ];
     int stride = (width*2);
     int i;