Commit f2a1e6ff authored by Jean-Baptiste Kempf's avatar Jean-Baptiste Kempf

Fix Stack off-by-one overflow in vc1 packetizer

Pointed-By: Clément Lecigne
(cherry picked from commit 08879e4e4284cd5359578731701195e5d19c2f20)
Signed-off-by: default avatarJean-Baptiste Kempf <jb@videolan.org>
parent a8cc1959
...@@ -285,7 +285,7 @@ static void DecodeRIDU( uint8_t *p_ret, int *pi_ret, uint8_t *src, int i_src ) ...@@ -285,7 +285,7 @@ static void DecodeRIDU( uint8_t *p_ret, int *pi_ret, uint8_t *src, int i_src )
while( src < end && dst < dst_end ) while( src < end && dst < dst_end )
{ {
if( src < end - 3 && src[0] == 0x00 && src[1] == 0x00 && if( src < end - 3 && src[0] == 0x00 && src[1] == 0x00 &&
src[2] == 0x03 ) src[2] == 0x03 && dst < dst_end - 1 )
{ {
*dst++ = 0x00; *dst++ = 0x00;
*dst++ = 0x00; *dst++ = 0x00;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment