diff options
| author | Paul B Mahol <onemda@gmail.com> | 2013-04-03 12:57:58 +0000 |
|---|---|---|
| committer | Carl Eugen Hoyos <cehoyos@ag.or.at> | 2013-04-03 15:17:54 +0200 |
| commit | 537c17385350015aa19e61434af89266f4b74641 (patch) | |
| tree | fc92542631cd9c333c2d1321be303ffffd456665 | |
| parent | dfeef3a209ecb3dcf01a1ad14e7fc4586e630e93 (diff) | |
| download | ffmpeg-537c17385350015aa19e61434af89266f4b74641.tar.gz | |
smacker: fix off by one error
Regression since a93b572ae4f517ce0c35cf085167c318e9215908.
Fixes #2426.
Signed-off-by: Paul B Mahol <onemda@gmail.com>
(cherry picked from commit e3cc92a623a6ece42816c7a692c8815688a99ab0)
| -rw-r--r-- | libavformat/smacker.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libavformat/smacker.c b/libavformat/smacker.c index 80e2fa694e..b2c442e2d8 100644 --- a/libavformat/smacker.c +++ b/libavformat/smacker.c @@ -263,7 +263,7 @@ static int smacker_read_packet(AVFormatContext *s, AVPacket *pkt) } else if(t & 0x40){ /* copy with offset */ off = avio_r8(s->pb); j = (t & 0x3F) + 1; - if (off + j > 0xff) { + if (off + j - 1 > 0xff) { av_log(s, AV_LOG_ERROR, "Invalid palette update, offset=%d length=%d extends beyond palette size\n", off, j); |