pcx: Add missing padding to scanline buffer
authorMichael Niedermayer <michaelni@gmx.at>
Sun, 10 Feb 2013 16:19:35 +0000 (17:19 +0100)
committerMichael Niedermayer <michaelni@gmx.at>
Sun, 10 Feb 2013 16:32:05 +0000 (17:32 +0100)
Fixes out of array read

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
libavcodec/pcx.c

index d21639e..e7f9c24 100644 (file)
@@ -161,7 +161,7 @@ static int pcx_decode_frame(AVCodecContext *avctx, void *data, int *got_frame,
     ptr    = p->data[0];
     stride = p->linesize[0];
 
-    scanline = av_malloc(bytes_per_scanline);
+    scanline = av_malloc(bytes_per_scanline + FF_INPUT_BUFFER_PADDING_SIZE);
     if (!scanline)
         return AVERROR(ENOMEM);