aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMichael Niedermayer <michaelni@gmx.at>2012-09-07 12:35:41 +0200
committerMichael Niedermayer <michaelni@gmx.at>2012-09-19 01:08:24 +0200
commitd36c706b868b4801bb5e9756bf921ecc8ca8ae10 (patch)
treea53d88012031a8fb50bf4e3ef34249f9986e3b72
parentfcb8bbf26411d9abc71a9a6d74e44c81b6699983 (diff)
downloadffmpeg-d36c706b868b4801bb5e9756bf921ecc8ca8ae10.tar.gz
faxcompr: fix out of array read
Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 5891e454a667e42ef71a06bfd9661540ea3f3ebd) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 55b3e408fa18b918bd0cabb1b27f1f0c4ce57a64) Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
-rw-r--r--libavcodec/faxcompr.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/libavcodec/faxcompr.c b/libavcodec/faxcompr.c
index c157b984d3..f66d33f133 100644
--- a/libavcodec/faxcompr.c
+++ b/libavcodec/faxcompr.c
@@ -228,7 +228,7 @@ static int decode_group3_2d_line(AVCodecContext *avctx, GetBitContext *gb,
mode = !mode;
}
//sync line pointers
- while(run_off <= offs){
+ while(offs < width && run_off <= offs){
run_off += *ref++;
run_off += *ref++;
}