From 7ee5e97c46e30fb3d6f9f78cc3313dbc06528b37 Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Tue, 7 May 2013 16:07:27 +0200 Subject: [PATCH] gifdec: reset previous Graphic Control Extension disposal type This fixes out of array accesses. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer (cherry picked from commit d23b8462b5a4a9da78ed45c4a7a3b35d538df909) Signed-off-by: Michael Niedermayer --- libavcodec/gifdec.c | 1 + 1 file changed, 1 insertion(+) diff --git a/libavcodec/gifdec.c b/libavcodec/gifdec.c index 8fb1f4bbbd..727887ab44 100644 --- a/libavcodec/gifdec.c +++ b/libavcodec/gifdec.c @@ -462,6 +462,7 @@ static int gif_decode_frame(AVCodecContext *avctx, void *data, int *got_frame, A if (s->keyframe) { s->keyframe_ok = 0; + s->gce_prev_disposal = GCE_DISPOSAL_NONE; if ((ret = gif_read_header1(s)) < 0) return ret;