diff options
author | Paul B Mahol <onemda@gmail.com> | 2019-10-15 17:31:15 +0300 |
---|---|---|
committer | Michael Niedermayer <michael@niedermayer.cc> | 2022-05-04 19:49:23 +0300 |
commit | cde751ce49e38979626d7c31ffadc57df3d5c518 (patch) | |
tree | c2eff83b9cb80c142487bcaff62d70e6a4895eb8 /libavfilter | |
parent | c5629402fa538e957e6e1d7d701ea199e78c36cc (diff) |
avfilter/vf_avgblur: fix heap-buffer overflow
Fixes #8274
(cherry picked from commit f069a9c2a65bc20c3462127623127df6dfd06c5b)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Diffstat (limited to 'libavfilter')
-rw-r--r-- | libavfilter/vf_avgblur.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libavfilter/vf_avgblur.c b/libavfilter/vf_avgblur.c index afd4a6ab79..3e268bb6ee 100644 --- a/libavfilter/vf_avgblur.c +++ b/libavfilter/vf_avgblur.c @@ -149,7 +149,7 @@ static int filter_vertically_##name(AVFilterContext *ctx, void *arg, int jobnr, \ src = s->buffer + x; \ ptr = buffer + x; \ - for (i = 0; i <= radius; i++) { \ + for (i = 0; i + radius < height && i <= radius; i++) { \ acc += src[(i + radius) * width]; \ count++; \ ptr[i * linesize] = acc / count; \ |