avcodec/utvideodec: fix possible write past end of array

1 year ago · b97ac6b3df
parent 9c9f48e7f2
commit b97ac6b3df
1 changed files with 1 additions and 1 deletions
--- a/libavcodec/utvideodec.c
+++ b/libavcodec/utvideodec.c
@ -985,7 +985,7 @@ static av_cold int decode_init(AVCodecContext *avctx)
        return AVERROR_INVALIDDATA;
    }

-    c->buffer = av_calloc(avctx->width, c->pro?2:1);
+    c->buffer = av_calloc(avctx->width + 8, c->pro?2:1);
    if (!c->buffer)
        return AVERROR(ENOMEM);