aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPaul B Mahol <onemda@gmail.com>2013-04-03 12:57:58 +0000
committerCarl Eugen Hoyos <cehoyos@ag.or.at>2013-04-03 15:17:26 +0200
commit1aa50348d8bc74fad59bca4f2c52b05ac0f92a60 (patch)
treed6ed9d79d39d9070866d5f34aeb967260ddcb309
parent8b72bcba713ae2dd48c260265010c9831dffdc30 (diff)
downloadffmpeg-1aa50348d8bc74fad59bca4f2c52b05ac0f92a60.tar.gz
smacker: fix off by one error
Regression since a93b572ae4f517ce0c35cf085167c318e9215908. Fixes #2426. Signed-off-by: Paul B Mahol <onemda@gmail.com> (cherry picked from commit e3cc92a623a6ece42816c7a692c8815688a99ab0)
-rw-r--r--libavformat/smacker.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/libavformat/smacker.c b/libavformat/smacker.c
index b2fd0b6d20..2385088200 100644
--- a/libavformat/smacker.c
+++ b/libavformat/smacker.c
@@ -269,7 +269,7 @@ static int smacker_read_packet(AVFormatContext *s, AVPacket *pkt)
} else if(t & 0x40){ /* copy with offset */
off = avio_r8(s->pb);
j = (t & 0x3F) + 1;
- if (off + j > 0xff) {
+ if (off + j - 1 > 0xff) {
av_log(s, AV_LOG_ERROR,
"Invalid palette update, offset=%d length=%d extends beyond palette size\n",
off, j);