Commit af878173 authored by Rémi Duraffort's avatar Rémi Duraffort Committed by Jean-Baptiste Kempf

mpeg_ts: fix potential array off by one

parent 95f14593
......@@ -557,10 +557,10 @@ static int Open( vlc_object_t *p_this )
{
p_sys->pmtmap[p_sys->i_pmtslots].i_pid = i_pid;
p_sys->pmtmap[p_sys->i_pmtslots].i_prog = p_sys->i_num_pmt - 1;
if ( ++p_sys->i_pmtslots > MAX_PMT_PID )
if ( ++p_sys->i_pmtslots >= MAX_PMT_PID )
{
msg_Err( p_mux, "Number of pids in PMT > %d", MAX_PMT_PID );
p_sys->i_pmtslots = MAX_PMT_PID;
p_sys->i_pmtslots = MAX_PMT_PID - 1;
}
}
}
......@@ -633,7 +633,7 @@ static int Open( vlc_object_t *p_this )
if( i_pid == 0 )
{
if( i > MAX_PMT )
if( i >= MAX_PMT )
msg_Err( p_mux, "Number of PMTs > maximum (%d)", MAX_PMT );
}
else
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment