1*4882a593SmuzhiyunFrom 7a7ca574d5805dfa89efd35f1c38d6582a77dd7a Mon Sep 17 00:00:00 2001 2*4882a593SmuzhiyunFrom: Jeffy Chen <jeffy.chen@rock-chips.com> 3*4882a593SmuzhiyunDate: Fri, 12 May 2023 09:38:03 +0800 4*4882a593SmuzhiyunSubject: [PATCH 42/42] kmssink: Avoid src size overflow 5*4882a593Smuzhiyun 6*4882a593SmuzhiyunThe scaled video source size might overflow in 7*4882a593Smuzhiyungst_kms_sink_calculate_display_ratio() 8*4882a593Smuzhiyun 9*4882a593SmuzhiyunSigned-off-by: Jeffy Chen <jeffy.chen@rock-chips.com> 10*4882a593Smuzhiyun--- 11*4882a593Smuzhiyun sys/kms/gstkmssink.c | 12 ++++++++++++ 12*4882a593Smuzhiyun 1 file changed, 12 insertions(+) 13*4882a593Smuzhiyun 14*4882a593Smuzhiyundiff --git a/sys/kms/gstkmssink.c b/sys/kms/gstkmssink.c 15*4882a593Smuzhiyunindex 48d3f5b..bf26793 100644 16*4882a593Smuzhiyun--- a/sys/kms/gstkmssink.c 17*4882a593Smuzhiyun+++ b/sys/kms/gstkmssink.c 18*4882a593Smuzhiyun@@ -1706,6 +1706,18 @@ gst_kms_sink_calculate_display_ratio (GstKMSSink * self, GstVideoInfo * vinfo, 19*4882a593Smuzhiyun *scaled_height = video_height; 20*4882a593Smuzhiyun } 21*4882a593Smuzhiyun 22*4882a593Smuzhiyun+ if (*scaled_width > video_width) { 23*4882a593Smuzhiyun+ GST_DEBUG_OBJECT (self, "keeping video width"); 24*4882a593Smuzhiyun+ *scaled_width = video_width; 25*4882a593Smuzhiyun+ *scaled_height = (guint) 26*4882a593Smuzhiyun+ gst_util_uint64_scale_int (video_width, dar_d, dar_n); 27*4882a593Smuzhiyun+ } else if (*scaled_height > video_height) { 28*4882a593Smuzhiyun+ GST_DEBUG_OBJECT (self, "keeping video height"); 29*4882a593Smuzhiyun+ *scaled_width = (guint) 30*4882a593Smuzhiyun+ gst_util_uint64_scale_int (video_height, dar_n, dar_d); 31*4882a593Smuzhiyun+ *scaled_height = video_height; 32*4882a593Smuzhiyun+ } 33*4882a593Smuzhiyun+ 34*4882a593Smuzhiyun out: 35*4882a593Smuzhiyun GST_DEBUG_OBJECT (self, "scaling to %dx%d", *scaled_width, *scaled_height); 36*4882a593Smuzhiyun 37*4882a593Smuzhiyun-- 38*4882a593Smuzhiyun2.20.1 39*4882a593Smuzhiyun 40