diff options
| author | Paul B Mahol <onemda@gmail.com> | 2013-04-03 12:57:58 +0000 |
|---|---|---|
| committer | Carl Eugen Hoyos <cehoyos@ag.or.at> | 2013-04-03 15:17:11 +0200 |
| commit | 5ee539f69d9ab5369bc13819e33cff1bb55075e8 (patch) | |
| tree | 548a345aaab467a57022c8a3b1069f392f1161e4 | |
| parent | 8ba3198549b9b21386022a245efb67470cca5644 (diff) | |
| download | ffmpeg-5ee539f69d9ab5369bc13819e33cff1bb55075e8.tar.gz | |
smacker: fix off by one error
Regression since a93b572ae4f517ce0c35cf085167c318e9215908.
Fixes #2426.
Signed-off-by: Paul B Mahol <onemda@gmail.com>
(cherry picked from commit e3cc92a623a6ece42816c7a692c8815688a99ab0)
| -rw-r--r-- | libavformat/smacker.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libavformat/smacker.c b/libavformat/smacker.c index 883a2b7254..84481e22a6 100644 --- a/libavformat/smacker.c +++ b/libavformat/smacker.c @@ -276,7 +276,7 @@ static int smacker_read_packet(AVFormatContext *s, AVPacket *pkt) } else if(t & 0x40){ /* copy with offset */ off = avio_r8(s->pb); j = (t & 0x3F) + 1; - if (off + j > 0xff) { + if (off + j - 1 > 0xff) { av_log(s, AV_LOG_ERROR, "Invalid palette update, offset=%d length=%d extends beyond palette size\n", off, j); |