diff options
| author | Mark H Weaver <mhw@netris.org> | 2015-07-06 21:11:47 -0400 |
|---|---|---|
| committer | Mark H Weaver <mhw@netris.org> | 2015-07-06 21:17:05 -0400 |
| commit | 723e886656927f1290596407f2847bee254260d0 (patch) | |
| tree | 3fceb9c48e6ad293a4baf04abf54f8ccdc045f13 /gnu/packages/patches/libvpx-vp9-out-of-bounds-access.patch | |
| parent | 9ed548643918bb9415b16707f360f49fcab89627 (diff) | |
gnu: libvpx: Update to 1.4.0.
* gnu/packages/patches/libvpx-fix-armhf-link.patch,
gnu/packages/patches/libvpx-fix-ssse3-quantize.patch,
gnu/packages/patches/libvpx-vp9-out-of-bounds-access.patch: Remove files.
* gnu-system.am (dist_patch_DATA): Remove them.
* gnu/packages/video.scm (libvpx): Update to 1.4.0. Remove patches. Update
source URI.
Diffstat (limited to 'gnu/packages/patches/libvpx-vp9-out-of-bounds-access.patch')
| -rw-r--r-- | gnu/packages/patches/libvpx-vp9-out-of-bounds-access.patch | 35 |
1 files changed, 0 insertions, 35 deletions
diff --git a/gnu/packages/patches/libvpx-vp9-out-of-bounds-access.patch b/gnu/packages/patches/libvpx-vp9-out-of-bounds-access.patch deleted file mode 100644 index 6aec8aa2f0..0000000000 --- a/gnu/packages/patches/libvpx-vp9-out-of-bounds-access.patch +++ /dev/null @@ -1,35 +0,0 @@ -Copied from Debian. - -# HG changeset patch -# User Ralph Giles <giles@mozilla.com> -# Date 1412209683 25200 -# Node ID 6023f0b4f8ba49dd117106cc98cd8007c2142bf6 -# Parent 8c431dcec0ffde13988d47eacf341113ea883245 -Bug 1063327 - Reject vp9 frames with invalid tiles. r=kinetik, a=abillings - -diff --git a/vp9/decoder/vp9_decodframe.c b/vp9/decoder/vp9_decodframe.c ---- a/vp9/decoder/vp9_decodframe.c -+++ b/vp9/decoder/vp9_decodframe.c -@@ -863,16 +863,21 @@ static size_t get_tile(const uint8_t *co - - if (!is_last) { - if (!read_is_valid(*data, 4, data_end)) - vpx_internal_error(error_info, VPX_CODEC_CORRUPT_FRAME, - "Truncated packet or corrupt tile length"); - - size = read_be32(*data); - *data += 4; -+ -+ if (size > data_end - *data) { -+ vpx_internal_error(error_info, VPX_CODEC_CORRUPT_FRAME, -+ "Truncated packet or corrupt tile size"); -+ } - } else { - size = data_end - *data; - } - return size; - } - - typedef struct TileBuffer { - const uint8_t *data; - |