shithub: libvpx

Download patch

ref: abfd2a4880b3e18fdc6570ab4d1acaaf21273c9f
parent: e6c89a1f9bd7a956ee11b97b8b77c45692a7a9ec
parent: 232ccc2fbe06599a20535fc97bb7e25767524f46
author: Jingning Han <jingning@google.com>
date: Wed Feb 20 11:27:27 EST 2013

Merge "Fixed the buffer overflow issue" into experimental

--- a/vp9/encoder/vp9_onyx_if.c
+++ b/vp9/encoder/vp9_onyx_if.c
@@ -944,7 +944,7 @@
   vpx_free(cpi->tok);
 
   {
-    unsigned int tokens = cm->mb_rows * cm->mb_cols * 24 * 16;
+    unsigned int tokens = cm->mb_rows * cm->mb_cols * (24 * 16 + 1);
 
     CHECK_MEM_ERROR(cpi->tok, vpx_calloc(tokens, sizeof(*cpi->tok)));
   }