FFmpeg/libavcodec
Andreas Cadhalpun 6fdbaa2b7f vp8: change mv_{min,max}.{x,y} type to int
If one of the dimensions is larger than 8176, s->mb_width or
s->mb_height is larger than 511, leading to an int16_t overflow of
s->mv_max.{x,y}. This then causes av_clip to be called with amin > amax.

Changing the type to int avoids the overflow and has no negative
effect, because s->mv_max is only used in clamp_mv for clipping.
Since mv_max.{x,y} is positive and mv_min.{x,y} negative, av_clip can't
increase the absolute value. The input to av_clip is an int16_t, and
thus the output fits into int16_t as well.

For additional safety, s->mv_{min,max}.{x,y} are clipped to int16_t range
before use.

Reviewed-by: Ronald S. Bultje <rsbultje@gmail.com>
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
2015-06-08 23:29:14 +02:00
..
2014-11-13 19:01:08 +01:00
2015-03-10 23:33:57 +01:00
2015-04-18 14:13:59 -03:00
2015-04-20 04:11:23 +02:00
2014-08-24 11:05:42 +00:00
2014-08-24 11:05:42 +00:00
2015-06-04 22:37:01 +02:00
2014-08-24 11:05:42 +00:00
2015-02-21 20:38:13 +01:00
2015-06-04 23:10:56 +02:00
2015-04-22 17:45:51 +02:00
2014-12-18 23:27:14 +01:00
2015-02-06 19:07:29 +01:00
2014-11-14 20:25:02 +01:00
2014-09-06 20:59:20 +02:00
2015-04-29 20:13:59 +02:00
2014-08-24 11:05:42 +00:00
2015-04-18 14:14:24 -03:00
2015-04-18 14:14:11 -03:00
2015-05-06 17:50:09 +02:00
2014-08-24 11:05:42 +00:00
2015-02-08 00:12:46 +01:00
2014-12-08 13:29:18 +00:00
2014-10-28 12:22:03 +01:00
2015-05-28 16:10:56 +02:00
2014-10-28 15:30:05 +01:00
2015-02-14 19:45:23 +00:00
2015-03-14 14:05:25 +01:00
2015-06-06 16:02:19 +00:00
2014-10-24 09:53:42 +03:00
2015-05-28 01:01:16 +02:00
2015-02-10 14:20:32 +00:00
2015-06-02 15:41:44 +02:00
2015-06-01 11:36:30 +03:00
2015-03-02 19:32:23 +01:00
2015-04-28 00:04:58 +02:00
2015-06-06 12:57:20 +02:00
2015-04-28 00:04:58 +02:00
2015-06-08 19:11:27 +02:00
2015-05-31 15:03:31 +02:00
2015-05-25 16:08:08 +02:00
2015-05-07 07:19:52 -04:00
2015-05-31 15:03:31 +02:00
2015-05-31 15:03:31 +02:00
2014-11-25 02:00:06 +00:00
2015-05-20 15:50:58 +02:00
2014-08-24 11:05:42 +00:00
2015-01-17 13:01:26 +01:00
2014-08-24 11:05:42 +00:00
2015-01-15 01:25:16 +01:00
2014-12-20 11:29:19 +01:00
2014-08-19 13:35:44 +00:00
2015-01-22 01:47:54 +01:00
2014-12-03 11:56:22 +01:00
2015-01-22 01:49:04 +01:00
2015-01-22 01:49:04 +01:00
2015-01-13 17:27:45 +01:00
2014-08-24 11:05:42 +00:00
2015-01-11 12:15:03 +01:00
2014-08-24 11:05:42 +00:00
2014-08-24 11:05:42 +00:00
2014-08-24 11:05:42 +00:00
2014-11-16 23:48:38 +01:00
2014-08-24 11:05:42 +00:00
2014-08-24 11:05:42 +00:00
2014-10-27 20:55:57 +01:00
2014-08-31 10:25:36 +02:00
2014-11-25 02:00:27 +01:00
2014-08-24 11:05:42 +00:00
2014-09-30 20:21:14 +02:00
2014-08-24 11:05:42 +00:00
2014-08-24 11:05:42 +00:00
2014-08-24 11:05:42 +00:00
2014-08-24 11:05:42 +00:00
2015-03-16 13:04:47 +01:00
2014-10-22 23:12:38 +02:00
2014-07-12 22:33:27 +02:00
2015-02-06 21:02:08 +01:00
2015-02-14 12:48:41 +00:00
2014-08-24 11:05:42 +00:00
2014-08-24 11:05:42 +00:00
2015-05-13 00:41:38 +02:00
2015-04-18 18:07:54 -03:00
2015-05-31 15:03:31 +02:00
2015-02-04 09:45:41 +00:00
2015-01-19 17:12:09 +01:00