diff options
author | Aneesh Dogra <lionaneesh@gmail.com> | 2012-01-05 00:10:01 +0530 |
---|---|---|
committer | Ronald S. Bultje <rsbultje@gmail.com> | 2012-01-04 21:10:11 -0800 |
commit | 4b84f682232205eee84e0e6bea1858be8e234129 (patch) | |
tree | 649230b62258c0ad6f6c149d5c9f544454180497 /libavcodec/4xm.c | |
parent | 893f1376793e67e4be76d074d51313e59805bd40 (diff) | |
download | ffmpeg-4b84f682232205eee84e0e6bea1858be8e234129.tar.gz |
4xm: pass the correct remaining buffer size to decode_i2_frame().
frame_size is the number of bytes left in the packet, so if we are passing
buf-4 we can safely read frame_size+4 bytes.
Signed-off-by: Ronald S. Bultje <rsbultje@gmail.com>
Diffstat (limited to 'libavcodec/4xm.c')
-rw-r--r-- | libavcodec/4xm.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libavcodec/4xm.c b/libavcodec/4xm.c index 7cda26ed30..cfb8279870 100644 --- a/libavcodec/4xm.c +++ b/libavcodec/4xm.c @@ -786,7 +786,7 @@ static int decode_frame(AVCodecContext *avctx, if(frame_4cc == AV_RL32("ifr2")){ p->pict_type= AV_PICTURE_TYPE_I; - if(decode_i2_frame(f, buf-4, frame_size) < 0) + if(decode_i2_frame(f, buf-4, frame_size + 4) < 0) return -1; }else if(frame_4cc == AV_RL32("ifrm")){ p->pict_type= AV_PICTURE_TYPE_I; |