Browse Source

avformat/mpegvideodec: fix hypothetical pointer overflow in mpegvideo_probe()

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
tags/n2.7
Michael Niedermayer 11 years ago
parent
commit
32c4b504b4
1 changed files with 2 additions and 2 deletions
  1. +2
    -2
      libavformat/mpegvideodec.c

+ 2
- 2
libavformat/mpegvideodec.c View File

@@ -52,11 +52,11 @@ static int mpegvideo_probe(AVProbeData *p)
j = -1;
if (ptr[j + 8] & 2)
j+= 64;
if (ptr + j >= end)
if (j >= end - ptr)
break;
if (ptr[j + 8] & 1)
j+= 64;
if (ptr + j >= end)
if (j >= end - ptr)
break;
if (AV_RB24(ptr + j + 9) & 0xFFFFFE)
break;


Loading…
Cancel
Save