10l memory corruption bug found by Steven Johnson
authorAlex Beregszaszi <alex@rtfs.hu>
Thu, 23 Nov 2006 22:57:20 +0000 (22:57 +0000)
committerAlex Beregszaszi <alex@rtfs.hu>
Thu, 23 Nov 2006 22:57:20 +0000 (22:57 +0000)
Originally committed as revision 7163 to svn://svn.ffmpeg.org/ffmpeg/trunk

libavcodec/flicvideo.c

index 0e6f5bdcec7f8194cb518ea58a9c8525aefe90d2..fcdaf834bc7ed7bc035e2e1e103e5ce05a885d62 100644 (file)
@@ -536,7 +536,7 @@ static int flic_decode_frame_15_16BPP(AVCodecContext *avctx,
         case FLI_BLACK:
             /* set the whole frame to 0x0000 which is balck in both 15Bpp and 16Bpp modes. */
             memset(pixels, 0x0000,
-                   s->frame.linesize[0] * s->avctx->height * 2);
+                   s->frame.linesize[0] * s->avctx->height);
             break;
 
         case FLI_BRUN: