diff options
| author | Alex Converse <alex.converse@gmail.com> | 2009-01-20 08:00:39 +0000 |
|---|---|---|
| committer | Alex Converse <alex.converse@gmail.com> | 2009-01-20 08:00:39 +0000 |
| commit | 38cef584048b90d2405fdbb8b79a731535948d27 (patch) | |
| tree | 0a30735e042b0324c8d81e80b2ced2eb17a6a7ec /libavformat | |
| parent | 7eb68edba73839225fc20f2a3b76317034750ed7 (diff) | |
| download | ffmpeg-38cef584048b90d2405fdbb8b79a731535948d27.tar.gz | |
Fix a read past end of buffer crash in the mp3 probe
Originally committed as revision 16693 to svn://svn.ffmpeg.org/ffmpeg/trunk
Diffstat (limited to 'libavformat')
| -rw-r--r-- | libavformat/mp3.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libavformat/mp3.c b/libavformat/mp3.c index ec8c0bb997..eca9ad4240 100644 --- a/libavformat/mp3.c +++ b/libavformat/mp3.c @@ -364,7 +364,7 @@ static int mp3_read_probe(AVProbeData *p) max_frames = 0; buf = buf0; - end = buf + p->buf_size - sizeof(uint32_t); + end = p->buf + p->buf_size - sizeof(uint32_t); for(; buf < end; buf= buf2+1) { buf2 = buf; |