From: Paul B Mahol <onemda@gmail.com>
Date: Sun, 13 Oct 2019 21:10:16 +0000 (+0200)
Subject: avfilter/vf_fieldorder: fix heap-buffer overflow
X-Git-Url: https://git.sesse.net/?a=commitdiff_plain;h=07050d7bdc32d82e53ee5bb727f5882323d00dba;p=ffmpeg

avfilter/vf_fieldorder: fix heap-buffer overflow

Fixes #8264
---

diff --git a/libavfilter/vf_fieldorder.c b/libavfilter/vf_fieldorder.c
index ca55ff1f668..5707151f1be 100644
--- a/libavfilter/vf_fieldorder.c
+++ b/libavfilter/vf_fieldorder.c
@@ -108,8 +108,8 @@ static int filter_frame(AVFilterLink *inlink, AVFrame *frame)
             s->dst_tff ? "up" : "down");
     h = frame->height;
     for (plane = 0; plane < 4 && frame->data[plane] && frame->linesize[plane]; plane++) {
-        dst_line_step = out->linesize[plane];
-        src_line_step = frame->linesize[plane];
+        dst_line_step = out->linesize[plane] * (h > 2);
+        src_line_step = frame->linesize[plane] * (h > 2);
         line_size = s->line_size[plane];
         dst = out->data[plane];
         src = frame->data[plane];