xref: /aosp_15_r20/external/pdfium/third_party/libopenjpeg/0044-opj_t1_allocate_buffers.patch (revision 3ac0a46f773bac49fa9476ec2b1cf3f8da5ec3a4) 
1commit 0535bfc3b7d5cd6fc73a7d4a6749a338fc5d7703
2Author: Yuan <[email protected]>
3Date:   Tue May 31 17:55:12 2022 +0800
4
5    HT_DEC: Fix opj_t1_allocate_buffers malloc size error (#1426) (fixes #1413)
6
7diff --git a/src/lib/openjp2/ht_dec.c b/src/lib/openjp2/ht_dec.c
8index e2f3afd6..a803d1bb 100644
9--- a/src/lib/openjp2/ht_dec.c
10+++ b/src/lib/openjp2/ht_dec.c
11@@ -1063,7 +1063,7 @@ static OPJ_BOOL opj_t1_allocate_buffers(
12         if (flagssize > t1->flagssize) {
13
14             opj_aligned_free(t1->flags);
15-            t1->flags = (opj_flag_t*) opj_aligned_malloc(flagssize);
16+            t1->flags = (opj_flag_t*) opj_aligned_malloc(flagssize * sizeof(opj_flag_t));
17             if (!t1->flags) {
18                 /* FIXME event manager error callback */
19                 return OPJ_FALSE;
20@@ -1071,7 +1071,7 @@ static OPJ_BOOL opj_t1_allocate_buffers(
21         }
22         t1->flagssize = flagssize;
23
24-        memset(t1->flags, 0, flagssize);
25+        memset(t1->flags, 0, flagssize * sizeof(opj_flag_t));
26     }
27
28     t1->w = w;
29