summaryrefslogtreecommitdiff
path: root/src/gen6_mfd.c
diff options
context:
space:
mode:
authorGwenole Beauchesne <gwenole.beauchesne@intel.com>2012-02-02 14:42:11 +0100
committerGwenole Beauchesne <gwenole.beauchesne@intel.com>2012-02-23 10:12:16 +0100
commit96f453ab612c37845c5993b846553db40358a3b5 (patch)
treeed636020813a0d7715aa9176c8185c4417e4f7af /src/gen6_mfd.c
parent383f865ae42385f9c26886de6034b095176e0dd7 (diff)
downloadlibva-intel-driver-96f453ab612c37845c5993b846553db40358a3b5.tar.gz
libva-intel-driver-96f453ab612c37845c5993b846553db40358a3b5.tar.bz2
libva-intel-driver-96f453ab612c37845c5993b846553db40358a3b5.zip
vc1: fix bitplane buffer size (SNB, IVB).
This fixes buffer overflow in the newly allocated Gen buffer that holds VC-1 bitplanes. Signed-off-by: Gwenole Beauchesne <gwenole.beauchesne@intel.com>
Diffstat (limited to 'src/gen6_mfd.c')
-rw-r--r--src/gen6_mfd.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/gen6_mfd.c b/src/gen6_mfd.c
index 8280771..c87a65f 100644
--- a/src/gen6_mfd.c
+++ b/src/gen6_mfd.c
@@ -1502,7 +1502,7 @@ gen6_mfd_vc1_decode_init(VADriverContextP ctx,
bo = dri_bo_alloc(i965->intel.bufmgr,
"VC-1 Bitplane",
- bitplane_width * bitplane_width,
+ bitplane_width * height_in_mbs,
0x1000);
assert(bo);
gen6_mfd_context->bitplane_read_buffer.bo = bo;