From patchwork Tue Sep 8 21:18:37 2020 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Andreas Rheinhardt X-Patchwork-Id: 22177 Return-Path: X-Original-To: patchwork@ffaux-bg.ffmpeg.org Delivered-To: patchwork@ffaux-bg.ffmpeg.org Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org [79.124.17.100]) by ffaux.localdomain (Postfix) with ESMTP id DE22544BD83 for ; Wed, 9 Sep 2020 00:19:27 +0300 (EEST) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id CA24468B6A9; Wed, 9 Sep 2020 00:19:27 +0300 (EEST) X-Original-To: ffmpeg-devel@ffmpeg.org Delivered-To: ffmpeg-devel@ffmpeg.org Received: from mail-wm1-f65.google.com (mail-wm1-f65.google.com [209.85.128.65]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id A6DCF68B618 for ; Wed, 9 Sep 2020 00:19:26 +0300 (EEST) Received: by mail-wm1-f65.google.com with SMTP id e17so364541wme.0 for ; Tue, 08 Sep 2020 14:19:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:in-reply-to:references :mime-version:content-transfer-encoding; bh=uUl64ojI/TtGx8MTkxUIfZ17suIm0eS4Xh9ICCfM+Zc=; b=LpJ9OoJcpFx83KxcvmJ3VKUlwfLQwXoPMldMOisVXUVG2c3Bn8kMJwabe+0Aby+5iv vcFUXgptP+U2nzCxqAQDAdiOhdAbTyGNWBU4ZnqQwQ6QWXM3uAwemsQpnZolyM9tokJk S/vtjVuGqCPHQvBMGUA57DYl4A3MOx80SByWedgcGSIJxwQDV75kMOtOJfOwEIqEVKiw dcFZRJvjC1zxcDNYezJc15n3zuUD/LlQty0T1x+SNw7q8BlTvFZd3mNfUU+4AObW9ZN3 rssyYwJrrxCIVtJV2iSOfOkswwwhtONE9nm/WPLrUC0lULlPUba8woa7urbmnisXyn/z 0r4Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=uUl64ojI/TtGx8MTkxUIfZ17suIm0eS4Xh9ICCfM+Zc=; b=eQwGcleLxpcC99V5ACYkGz2q+GUpdSjCbJCIVYAYKKjs2YSFaj9cXRXPhkizPkUiYl Kwt84S7nkiZtcaBGyyHbhP6eaHHbGMzIKVz1FF0qQXZXglZu8uSxJxmGQVl8OeU/ckPO cU50/JQ9S2MzQwSlbsLgzNe1C6QTE3viyUdW254erqyGKCV87z2yjyNRBX80GhwCxFjC QvTD8B1RCC2GksnJwmIVCruAw+tExsjJfgwNpAILBnXYXZ1zyKu8cdxffFnFxNdfgWdw 7yt2Vg7PVj6dp1cgg65jNCLefbCxNDtO5nasLQIuK9N0/whkE7nsIv7BfAZSIM+GzHup Eguw== X-Gm-Message-State: AOAM533q1L8g9O8z8Ks0Zm9wRisiFIV3dFhDspOycbrEsn5CMITj7Zq/ RMavj3oFDPM0uO9IRUKc1P/GmRmPgF4= X-Google-Smtp-Source: ABdhPJw69BmMUWuX8B4akibiSsd3B6ICWfh6KbeHOguxX22hKDWvkBj2EwFmjzMfP3OG3OxqFVvh4A== X-Received: by 2002:a1c:92:: with SMTP id 140mr338646wma.39.1599599965451; Tue, 08 Sep 2020 14:19:25 -0700 (PDT) Received: from sblaptop.fritz.box (ipbcc1fb0f.dynamic.kabel-deutschland.de. [188.193.251.15]) by smtp.gmail.com with ESMTPSA id a15sm1074304wrn.3.2020.09.08.14.19.24 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 08 Sep 2020 14:19:24 -0700 (PDT) From: Andreas Rheinhardt To: ffmpeg-devel@ffmpeg.org Date: Tue, 8 Sep 2020 23:18:37 +0200 Message-Id: <20200908211856.16290-6-andreas.rheinhardt@gmail.com> X-Mailer: git-send-email 2.20.1 In-Reply-To: <20200908211856.16290-1-andreas.rheinhardt@gmail.com> References: <20200908211856.16290-1-andreas.rheinhardt@gmail.com> MIME-Version: 1.0 Subject: [FFmpeg-devel] [PATCH 06/25] avfilter/af_headphone: Fix stack buffer overflow X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Cc: Andreas Rheinhardt Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" The number of channels can be up to 64, not only 16. Signed-off-by: Andreas Rheinhardt --- libavfilter/af_headphone.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libavfilter/af_headphone.c b/libavfilter/af_headphone.c index 99bdefbcff..42adc82df8 100644 --- a/libavfilter/af_headphone.c +++ b/libavfilter/af_headphone.c @@ -187,7 +187,7 @@ static int headphone_convolute(AVFilterContext *ctx, void *arg, int jobnr, int n const int in_channels = in->channels; const int buffer_length = s->buffer_length; const uint32_t modulo = (uint32_t)buffer_length - 1; - float *buffer[16]; + float *buffer[64]; int wr = *write; int read; int i, l;