From 32c4b504b4ba16ef05ab474541150c39f758746c Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Sun, 15 Mar 2015 13:39:56 +0100 Subject: [PATCH] avformat/mpegvideodec: fix hypothetical pointer overflow in mpegvideo_probe() Signed-off-by: Michael Niedermayer --- libavformat/mpegvideodec.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/libavformat/mpegvideodec.c b/libavformat/mpegvideodec.c index 5ea5569379..aca962123b 100644 --- a/libavformat/mpegvideodec.c +++ b/libavformat/mpegvideodec.c @@ -52,11 +52,11 @@ static int mpegvideo_probe(AVProbeData *p) j = -1; if (ptr[j + 8] & 2) j+= 64; - if (ptr + j >= end) + if (j >= end - ptr) break; if (ptr[j + 8] & 1) j+= 64; - if (ptr + j >= end) + if (j >= end - ptr) break; if (AV_RB24(ptr + j + 9) & 0xFFFFFE) break;