Fix croppadd out of bounds write (we were padding 'paddleft+paddright' pixels on...

diff --git a/modules/video_filter/croppadd.c b/modules/video_filter/croppadd.c
index 3f9f64883d5b8a8addb950ddc251d1098a759cfb..0139b71bda849d19219d261e68161414525da5c8 100644 (file)
--- a/modules/video_filter/croppadd.c
+++ b/modules/video_filter/croppadd.c
@@ -286,7 +286,7 @@ static picture_t *Filter( filter_t *p_filter, picture_t *p_pic )
 
             /* Padd on the right */
             vlc_memset( p_out, i_padd_color,
-                        ( i_outwidth - i_width ) * i_pixel_pitch );
+                        ( i_outwidth - i_xpadd - i_width ) * i_pixel_pitch );
 
             /* Got to begining of the next line */
             p_in = p_in_next;