Skip to content

refmvs: Fix buffer overread in save_tmvs() asm

The refmvs_block struct is only 12 bytes large but it's accessed using 16-byte unaligned loads in asm.

In order to avoid reading past the end of the allocated buffer we therefore need to pad the allocation size by 4 bytes.

Reported by @mjbshaw.

Merge request reports

Loading