diff options
author | Martin Storsjö <martin@martin.st> | 2011-02-27 01:02:32 +0200 |
---|---|---|
committer | Luca Barbato <lu_zero@gentoo.org> | 2011-03-02 11:16:17 +0100 |
commit | e360ada2d13af36ab7afd9ebcd2bd236d23d9b96 (patch) | |
tree | 2aaa116d938feda59f5ab74a16a60d22af7d7f48 /libavcodec/c93.c | |
parent | 06ed4873e6e6aed8ec7cc24285d610ef4060880e (diff) | |
download | ffmpeg-e360ada2d13af36ab7afd9ebcd2bd236d23d9b96.tar.gz |
aviobuf: Write new data at s->buf_end in fill_buffer
In most cases, s->buf_ptr will be equal to s->buf_end when
fill_buffer is called, but this may not always be the case, if
we're seeking forward by reading (permitted by the short seek
threshold).
If fill_buffer is writing to s->buf_ptr instead of s->buf_end (when
they aren't equal and s->buf_ptr is ahead of s->buffer), the data
between s->buf_ptr and s->buf_end is overwritten, leading to
inconsistent buffer content. This could return incorrect data if
later seeking back into the area before the current s->buf_ptr.
Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
Diffstat (limited to 'libavcodec/c93.c')
0 files changed, 0 insertions, 0 deletions