shithub: libvpx

Info  •  Files  •  Log  •  Branches

Merge "Fixed the buffer overflow issue"

--- a/vp9/encoder/vp9_onyx_if.c

+++ b/vp9/encoder/vp9_onyx_if.c

@@ -1148,7 +1148,7 @@

   vpx_free(cpi->tok);

   {

-    unsigned int tokens = cm->mb_rows * cm->mb_cols * 24 * 16;

+    unsigned int tokens = cm->mb_rows * cm->mb_cols * (24 * 16 + 1);

     CHECK_MEM_ERROR(cpi->tok, vpx_calloc(tokens, sizeof(*cpi->tok)));

   }