With negative stride, the start of the edge_emu buffer should be pointing to the last line, not the end of the buffer. With positive stride, pointing to the end of the buffer was completely wrong. (cherry picked from commit a89f4ca005efa5ee82089583c7b8bc00bcee816a)
Unified · Split
| @@ -1459,8 +1459,7 @@ static void render_slice(Vp3DecodeContext *s, int slice) · 1458 unmodified lines | |||
| 1459 | 1459 | ||
| 1460 | if(src_x<0 || src_y<0 || src_x + 9 >= plane_width || src_y + 9 >= plane_height){ | 1460 | if(src_x<0 || src_y<0 || src_x + 9 >= plane_width || src_y + 9 >= plane_height){ |
| 1461 | uint8_t *temp= s->edge_emu_buffer; | 1461 | uint8_t *temp= s->edge_emu_buffer; |
| 1462 | if(stride<0) temp -= 9*stride; | 1462 | if(stride<0) temp -= 8*stride; |
| 1463 | else temp += 9*stride; | ||
| 1464 | 1463 | ||
| 1465 | s->dsp.emulated_edge_mc(temp, motion_source, stride, 9, 9, src_x, src_y, plane_width, plane_height); | 1464 | s->dsp.emulated_edge_mc(temp, motion_source, stride, 9, 9, src_x, src_y, plane_width, plane_height); |
| 1466 | motion_source= temp; | 1465 | motion_source= temp; |