diff options
| author | rtogni <rtogni@b3059339-0415-0410-9bf9-f77b7e298cf2> | 2007-02-11 17:55:49 +0000 |
|---|---|---|
| committer | rtogni <rtogni@b3059339-0415-0410-9bf9-f77b7e298cf2> | 2007-02-11 17:55:49 +0000 |
| commit | 2ea691d6f32ef9faa547129b938966f78dcc99a3 (patch) | |
| tree | 3e7641b8b6d26a57c3707337ec83727c6b2bec68 /loader | |
| parent | 5f85ff89eaeadf685f62286cd33936bc7c4d09a4 (diff) | |
| download | mpv-2ea691d6f32ef9faa547129b938966f78dcc99a3.tar.bz2 mpv-2ea691d6f32ef9faa547129b938966f78dcc99a3.tar.xz | |
Precent overflow of this->m_sVhdr->bmiHeader buffer, may have been
exploitable.
Reported by Moritz Jodeit
git-svn-id: svn://svn.mplayerhq.hu/mplayer/trunk@22204 b3059339-0415-0410-9bf9-f77b7e298cf2
Diffstat (limited to 'loader')
| -rw-r--r-- | loader/dmo/DMO_VideoDecoder.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/loader/dmo/DMO_VideoDecoder.c b/loader/dmo/DMO_VideoDecoder.c index 14779d841c..613ff1d066 100644 --- a/loader/dmo/DMO_VideoDecoder.c +++ b/loader/dmo/DMO_VideoDecoder.c @@ -119,6 +119,7 @@ DMO_VideoDecoder * DMO_VideoDecoder_Open(char* dllname, GUID* guid, BITMAPINFOHE this->iv.m_bh = malloc(bihs); memcpy(this->iv.m_bh, format, bihs); + this->iv.m_bh->biSize = bihs; this->iv.m_State = STOP; //this->iv.m_pFrame = 0; |