shithub: libvpx

Info  •  Files  •  Log  •  Branches

Fix overread/write reported by valgrind if (mb_cols) & 3 != 0.

We'd backup and restore all cols for a 64x64 SB, but the array wouldn't
be big enough to hold all that data.

Change-Id: Ic68ea721bf07e0b2f3937bd16b0b734bcc743ce1

--- a/vp9/common/vp9_alloccommon.c

+++ b/vp9/common/vp9_alloccommon.c

@@ -134,7 +134,8 @@

   oci->prev_mi = oci->prev_mip + oci->mode_info_stride + 1;

-  oci->above_context = vpx_calloc(sizeof(ENTROPY_CONTEXT_PLANES) * oci->mb_cols, 1);

+  oci->above_context =

+    vpx_calloc(sizeof(ENTROPY_CONTEXT_PLANES) * (3 + oci->mb_cols), 1);

   if (!oci->above_context) {

     vp9_de_alloc_frame_buffers(oci);