diff options
| author | Aurelien Jacobs <aurel@gnuage.org> | 2011-03-25 01:02:53 +0100 |
|---|---|---|
| committer | Aurelien Jacobs <aurel@gnuage.org> | 2011-03-25 01:02:53 +0100 |
| commit | 71af7377bf17017ed28c6266cb2840952211443a (patch) | |
| tree | db87eab376a52dd01e68207f107af4312afc7de1 | |
| parent | 0cd138340e5d7c668eb392721fa0015e5732cb39 (diff) | |
| download | ffmpeg-71af7377bf17017ed28c6266cb2840952211443a.tar.gz | |
srtdec: make sure we don't write past the end of buffer
Signed-off-by: Aurelien Jacobs <aurel@gnuage.org>
| -rw-r--r-- | libavcodec/srtdec.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libavcodec/srtdec.c b/libavcodec/srtdec.c index af03cc4d1c..701100a96c 100644 --- a/libavcodec/srtdec.c +++ b/libavcodec/srtdec.c @@ -94,7 +94,7 @@ static const char *srt_to_ass(AVCodecContext *avctx, char *out, char *out_end, break; case '<': tag_close = in[1] == '/'; - if (sscanf(in+tag_close+1, "%128[^>]>%n%c", buffer, &len,&c) >= 2) { + if (sscanf(in+tag_close+1, "%127[^>]>%n%c", buffer, &len,&c) >= 2) { if ((param = strchr(buffer, ' '))) *param++ = 0; if ((!tag_close && sptr < FF_ARRAY_ELEMS(stack)) || |