Selaa lähdekoodia

avfilter/vf_drawtext: Account for bbox text seperator

Fixes: out of array access
no test case

Found-by: Joshua Rogers <joshua@joshua.hu> with ZeroPath
Reviewed-by: Joshua Rogers <joshua@joshua.hu>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Michael Niedermayer 3 viikkoa sitten
vanhempi
sitoutus
ad956ff076
1 muutettua tiedostoa jossa 1 lisäystä ja 1 poistoa
  1. 1 1
      libavfilter/vf_drawtext.c

+ 1 - 1
libavfilter/vf_drawtext.c

@@ -1011,7 +1011,7 @@ static av_cold int init(AVFilterContext *ctx)
             av_log(ctx, AV_LOG_WARNING, "Multiple texts provided, will use text_source only\n");
             av_log(ctx, AV_LOG_WARNING, "Multiple texts provided, will use text_source only\n");
             av_free(s->text);
             av_free(s->text);
         }
         }
-        s->text = av_mallocz(AV_DETECTION_BBOX_LABEL_NAME_MAX_SIZE *
+        s->text = av_mallocz((AV_DETECTION_BBOX_LABEL_NAME_MAX_SIZE + 1) *
                              (AV_NUM_DETECTION_BBOX_CLASSIFY + 1));
                              (AV_NUM_DETECTION_BBOX_CLASSIFY + 1));
         if (!s->text)
         if (!s->text)
             return AVERROR(ENOMEM);
             return AVERROR(ENOMEM);