ref: 6639b25782758581939f866d13301fb0584b03c0
parent: 27bce6c5dca72f2686a7c0b9d4db2a4c582d75f0
parent: 936aa281b589e312aeaca2e7db0ec9dc87a2f99a
author: James Zern <jzern@google.com>
date: Fri Feb 22 07:36:32 EST 2013
Merge "Fixed the buffer overflow issue"
--- a/vp9/encoder/vp9_onyx_if.c
+++ b/vp9/encoder/vp9_onyx_if.c
@@ -1148,7 +1148,7 @@
vpx_free(cpi->tok);
{- unsigned int tokens = cm->mb_rows * cm->mb_cols * 24 * 16;
+ unsigned int tokens = cm->mb_rows * cm->mb_cols * (24 * 16 + 1);
CHECK_MEM_ERROR(cpi->tok, vpx_calloc(tokens, sizeof(*cpi->tok)));
}
--
⑨