[mythtv-commits] Ticket #5837: crash in CC708Window::Scroll

[MythTV]

#5837: crash in CC708Window::Scroll
-------------------------------------+--------------------------------------
 Reporter:  slamb at slamb.org          |        Owner:  ijr           
     Type:  defect                   |       Status:  infoneeded_new
 Priority:  critical                 |    Milestone:  0.22          
Component:  MythTV - Video Playback  |      Version:  head          
 Severity:  medium                   |   Resolution:                
  Mlocked:  0                        |  
-------------------------------------+--------------------------------------
Changes (by danielk):

  * status:  new => infoneeded_new


Comment:

 I need a short sample of a video that produces this segfault. I can't see
 any way to get into a state where this would happen.

 For this to happen true_column_count * true_row_count would have to exceed
 the size of the text array, but the only way for that to happen is if that
 value exceeds the maximum value of unsigned int and overflows. On all
 systems we support this is at least 32 bits or 4 gigabytes. This well
 exceeds the maximums for the number of rows and columns of text in 708
 captions.

-- 
Ticket URL: <http://svn.mythtv.org/trac/ticket/5837#comment:6>
MythTV <http://www.mythtv.org/>
MythTV