Fix Stack off-by-one overflow in vc1 packetizer

Pointed-By: Clément Lecigne

Fix Stack off-by-one overflow in vc1 packetizer
Pointed-By: Clément Lecigne
08879e4e · Jean-Baptiste Kempf · 8f312ab4 · 08879e4e
Commit 08879e4e authored May 12, 2012 by Jean-Baptiste Kempf
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

modules/packetizer/vc1.c modules/packetizer/vc1.c +1 -1

No files found.
--- a/modules/packetizer/vc1.c
+++ b/modules/packetizer/vc1.c
@@ -285,7 +285,7 @@ static void DecodeRIDU( uint8_t *p_ret, int *pi_ret, uint8_t *src, int i_src )
    while( src < end && dst < dst_end )
    {
        if( src < end - 3 && src[0] == 0x00 && src[1] == 0x00 &&
-            src[2] == 0x03 )
+            src[2] == 0x03 && dst < dst_end - 1 )
        {
            *dst++ = 0x00;
            *dst++ = 0x00;