The Tor Browser / file diff

     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/media/libtheora/bug468275-r18219.patch	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,22 @@
     1.4 +diff --git a/media/libtheora/lib/state.c b/media/libtheora/lib/state.c
     1.5 +--- a/media/libtheora/lib/state.c
     1.6 ++++ b/media/libtheora/lib/state.c
     1.7 +@@ -583,17 +583,17 @@ static int oc_state_ref_bufs_init(oc_the
     1.8 +    ref_frame_sz<yplane_sz||ref_frame_data_sz/_nrefs!=ref_frame_sz){
     1.9 +     return TH_EIMPL;
    1.10 +   }
    1.11 +   ref_frame_data=oc_aligned_malloc(ref_frame_data_sz,16);
    1.12 +   frag_buf_offs=_state->frag_buf_offs=
    1.13 +    _ogg_malloc(_state->nfrags*sizeof(*frag_buf_offs));
    1.14 +   if(ref_frame_data==NULL||frag_buf_offs==NULL){
    1.15 +     _ogg_free(frag_buf_offs);
    1.16 +-    _ogg_free(ref_frame_data);
    1.17 ++    oc_aligned_free(ref_frame_data);
    1.18 +     return TH_EFAULT;
    1.19 +   }
    1.20 +   /*Set up the width, height and stride for the image buffers.*/
    1.21 +   _state->ref_frame_bufs[0][0].width=info->frame_width;
    1.22 +   _state->ref_frame_bufs[0][0].height=info->frame_height;
    1.23 +   _state->ref_frame_bufs[0][0].stride=yhstride;
    1.24 +   _state->ref_frame_bufs[0][1].width=_state->ref_frame_bufs[0][2].width=
    1.25 +    info->frame_width>>hdec;