avidec: use actually read size instead of requested size
Fixes CVE-2012-2788 (cherry picked from commit 0af49a63c7f87876486ab09482d5b26b95abce60) Signed-off-by: Reinhard Tartler <siretart@tauware.de>
This commit is contained in:
parent
6744eee1e5
commit
0582b8e3ea
@ -1116,7 +1116,7 @@ resync:
|
|||||||
}
|
}
|
||||||
ast->frame_offset += get_duration(ast, pkt->size);
|
ast->frame_offset += get_duration(ast, pkt->size);
|
||||||
}
|
}
|
||||||
ast->remaining -= size;
|
ast->remaining -= err;
|
||||||
if(!ast->remaining){
|
if(!ast->remaining){
|
||||||
avi->stream_index= -1;
|
avi->stream_index= -1;
|
||||||
ast->packet_size= 0;
|
ast->packet_size= 0;
|
||||||
|
Loading…
x
Reference in New Issue
Block a user