Commit 08879e4e authored by Jean-Baptiste Kempf's avatar Jean-Baptiste Kempf

Fix Stack off-by-one overflow in vc1 packetizer

Pointed-By: Clément Lecigne
parent 8f312ab4
...@@ -285,7 +285,7 @@ static void DecodeRIDU( uint8_t *p_ret, int *pi_ret, uint8_t *src, int i_src ) ...@@ -285,7 +285,7 @@ static void DecodeRIDU( uint8_t *p_ret, int *pi_ret, uint8_t *src, int i_src )
while( src < end && dst < dst_end ) while( src < end && dst < dst_end )
{ {
if( src < end - 3 && src[0] == 0x00 && src[1] == 0x00 && if( src < end - 3 && src[0] == 0x00 && src[1] == 0x00 &&
src[2] == 0x03 ) src[2] == 0x03 && dst < dst_end - 1 )
{ {
*dst++ = 0x00; *dst++ = 0x00;
*dst++ = 0x00; *dst++ = 0x00;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment