summaryrefslogtreecommitdiffstats
path: root/loader
diff options
context:
space:
mode:
authorrtogni <rtogni@b3059339-0415-0410-9bf9-f77b7e298cf2>2007-02-11 17:57:02 +0000
committerrtogni <rtogni@b3059339-0415-0410-9bf9-f77b7e298cf2>2007-02-11 17:57:02 +0000
commit656c22ca16c28fcd3a0498cef3078fb8cb351578 (patch)
tree956ec2b854837750e929175157dc8ed8bc0ec79b /loader
parent2ea691d6f32ef9faa547129b938966f78dcc99a3 (diff)
downloadmpv-656c22ca16c28fcd3a0498cef3078fb8cb351578.tar.bz2
mpv-656c22ca16c28fcd3a0498cef3078fb8cb351578.tar.xz
Precent overflow of this->m_sVhdr->bmiHeader buffer, may have been
exploitable. git-svn-id: svn://svn.mplayerhq.hu/mplayer/trunk@22205 b3059339-0415-0410-9bf9-f77b7e298cf2
Diffstat (limited to 'loader')
-rw-r--r--loader/dshow/DS_VideoDecoder.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/loader/dshow/DS_VideoDecoder.c b/loader/dshow/DS_VideoDecoder.c
index de2e81b83d..248938dbf3 100644
--- a/loader/dshow/DS_VideoDecoder.c
+++ b/loader/dshow/DS_VideoDecoder.c
@@ -114,6 +114,7 @@ DS_VideoDecoder * DS_VideoDecoder_Open(char* dllname, GUID* guid, BITMAPINFOHEAD
this->iv.m_bh = malloc(bihs);
memcpy(this->iv.m_bh, format, bihs);
+ this->iv.m_bh->biSize = bihs;
this->iv.m_State = STOP;
//this->iv.m_pFrame = 0;