From a7bfbe4e130779e1aefe59abbc1d93944d43bd4e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Reimar=20D=C3=B6ffinger?= <Reimar.Doeffinger@gmx.de>
Date: Sun, 31 May 2009 17:44:35 +0000
Subject: [PATCH] lcldec: ensure that the offset for av_memcpy_backptr is
 valid.

Originally committed as revision 19067 to svn://svn.ffmpeg.org/ffmpeg/trunk
---
 libavcodec/lcldec.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/libavcodec/lcldec.c b/libavcodec/lcldec.c
index 53637f2507..bc7e11d267 100644
--- a/libavcodec/lcldec.c
+++ b/libavcodec/lcldec.c
@@ -93,6 +93,7 @@ static unsigned int mszh_decomp(const unsigned char * srcptr, int srclen, unsign
             unsigned ofs = bytestream_get_le16(&srcptr);
             unsigned cnt = (ofs >> 11) + 1;
             ofs &= 0x7ff;
+            ofs = FFMIN(ofs, destptr - destptr_bak);
             cnt *= 4;
             cnt = FFMIN(cnt, destptr_end - destptr);
             av_memcpy_backptr(destptr, ofs, cnt);