diff options
| author | Michael Niedermayer <michaelni@gmx.at> | 2012-10-12 02:06:51 +0200 |
|---|---|---|
| committer | Martin Storsjö <martin@martin.st> | 2012-10-12 18:16:59 +0300 |
| commit | 2f1b2ff934e672c7ad5d8f1efe887350edc4daec (patch) | |
| tree | 1f13d244abcffb452d04d25caa905023176432e2 /libavformat | |
| parent | eae35eadc0ae943598ed3f971245fe39a1cd213b (diff) | |
| download | ffmpeg-2f1b2ff934e672c7ad5d8f1efe887350edc4daec.tar.gz | |
rtmpproto: Fix an out of array write
Signed-off-by: Martin Storsjö <martin@martin.st>
Diffstat (limited to 'libavformat')
| -rw-r--r-- | libavformat/rtmpproto.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/libavformat/rtmpproto.c b/libavformat/rtmpproto.c index a5bc246e31..3ab2e57e62 100644 --- a/libavformat/rtmpproto.c +++ b/libavformat/rtmpproto.c @@ -1371,9 +1371,9 @@ static int rtmp_server_handshake(URLContext *s, RTMPContext *rt) /* By now same epoch will be sent */ hs_my_epoch = hs_epoch; /* Generate random */ - for (randomidx = 0; randomidx < (RTMP_HANDSHAKE_PACKET_SIZE); + for (randomidx = 8; randomidx < (RTMP_HANDSHAKE_PACKET_SIZE); randomidx += 4) - AV_WB32(hs_s1 + 8 + randomidx, av_get_random_seed()); + AV_WB32(hs_s1 + randomidx, av_get_random_seed()); ret = rtmp_send_hs_packet(rt, hs_my_epoch, 0, hs_s1, RTMP_HANDSHAKE_PACKET_SIZE); |