diff options
| author | Dale Curtis <dalecurtis@chromium.org> | 2012-04-12 18:02:33 -0700 |
|---|---|---|
| committer | Michael Niedermayer <michaelni@gmx.at> | 2012-04-13 11:28:32 +0200 |
| commit | fd165a0b3166bd4605f4f65197b0d43c9382f3e7 (patch) | |
| tree | 3ad64798b3171edf6323387b5b6f2534e7f01412 /libavformat | |
| parent | a9d114dc8a24ae439fa6a2fe5eb1bfc346a0ad4a (diff) | |
| download | ffmpeg-fd165a0b3166bd4605f4f65197b0d43c9382f3e7.tar.gz | |
mov: Fix harmless OOB read.
Convert key_off initialize to use the same sc->keyframe_count as
used elsewhere in the function.
Signed-off-by: Dale Curtis <dalecurtis@chromium.org>
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
Diffstat (limited to 'libavformat')
| -rw-r--r-- | libavformat/mov.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libavformat/mov.c b/libavformat/mov.c index b4ff1df2eb..ce61250eac 100644 --- a/libavformat/mov.c +++ b/libavformat/mov.c @@ -1842,7 +1842,7 @@ static void mov_build_index(MOVContext *mov, AVStream *st) unsigned int stts_sample = 0; unsigned int sample_size; unsigned int distance = 0; - int key_off = sc->keyframes && sc->keyframes[0] == 1; + int key_off = sc->keyframe_count && sc->keyframes[0] == 1; current_dts -= sc->dts_shift; |