Commit 50387530 authored by Francois Cartegnie's avatar Francois Cartegnie

packetizer: hxxx: fix buffer read overflow

parent e15e038c
......@@ -51,6 +51,9 @@ block_t *PacketizeXXC1( decoder_t *p_dec, uint8_t i_nal_length_size,
int i_size = 0;
int i;
if( &p_block->p_buffer[p_block->i_buffer] - p < i_nal_length_size )
break;
for( i = 0; i < i_nal_length_size; i++ )
{
i_size = (i_size << 8) | (*p++);
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment