RepoMirrors
/
ffmpeg
mirror of https://git.ffmpeg.org/ffmpeg.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Fix buffer size check for xan_unpack which was broken by r18586 

Originally committed as revision 18589 to svn://svn.ffmpeg.org/ffmpeg/trunk
This commit is contained in:
Reimar Döffinger 2009-04-17 19:07:16 +00:00
parent c644665f42
commit 16cc5a738c
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
libavcodec/xan.c
View File

@ -156,7 +156,7 @@ static void xan_unpack(unsigned char *dest, const unsigned char *src, int dest_l
back = ((opcode & 0x10) << 12) + 1 + bytestream_get_be16(&src);
size2 = *src++ + 5 + ((opcode & 0xc) << 6);
if (dest >= dest_end || size > dest_end - dest)
if (size + size2 > dest_end - dest)
return;
}
memcpy(dest, src, size); dest += size; src += size;