diff options
author | Reimar Döffinger <Reimar.Doeffinger@gmx.de> | 2009-09-24 15:37:09 +0000 |
---|---|---|
committer | Reimar Döffinger <Reimar.Doeffinger@gmx.de> | 2009-09-24 15:37:09 +0000 |
commit | 98422c44cf86de6da8f73a7bd80284ed165c5a98 (patch) | |
tree | 79cf42abd43abd728d71bdaada4045b9fa60efd2 /LICENSE | |
parent | 595324e143b57a52e2329eb47b84395c70f93087 (diff) | |
download | ffmpeg-98422c44cf86de6da8f73a7bd80284ed165c5a98.tar.gz |
Fix possible buffer over-read in vorbis_comment, fix it double to be sure.
First, make s signed, so that comparisons against end - p will not be made as
unsigned, making the check incorrectly pass if p is beyond end.
Also ensure that p will never be > end, so the code is correct also if
buf is not padded.
Originally committed as revision 20014 to svn://svn.ffmpeg.org/ffmpeg/trunk
Diffstat (limited to 'LICENSE')
0 files changed, 0 insertions, 0 deletions