diff options
| author | Ronald S. Bultje <rsbultje@gmail.com> | 2011-10-15 00:03:55 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michaelni@gmx.at> | 2011-11-04 01:22:38 +0100 |
| commit | d51c7b4cbe022f6b3b026735dc7e29eb50bbf129 (patch) | |
| tree | e77de18625a47b7eb95c4ad2e8b455e5ec3a0bd4 | |
| parent | e58870a58749eb3266e16166d8370a5f2e960311 (diff) | |
| download | ffmpeg-d51c7b4cbe022f6b3b026735dc7e29eb50bbf129.tar.gz | |
matroskadec: fix out of bounds write
Signed-off-by: Janne Grunau <janne-libav@jannau.net>
(cherry picked from commit 723229c11f1400e6a09c8a1c9c27193f376eb1d1)
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
| -rw-r--r-- | libavformat/matroskadec.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libavformat/matroskadec.c b/libavformat/matroskadec.c index 66d3e46b08..f5894124bc 100644 --- a/libavformat/matroskadec.c +++ b/libavformat/matroskadec.c @@ -1811,7 +1811,7 @@ static int matroska_parse_block(MatroskaDemuxContext *matroska, uint8_t *data, lace_size[n] = lace_size[n - 1] + snum; total += lace_size[n]; } - lace_size[n] = size - total; + lace_size[laces - 1] = size - total; break; } } |