generic-library/ffmpeg
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

srtdec: fix a format string vulnerability.

Browse Source 
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
Fabian Greffrath 2012-03-03 02:35:27 +01:00 committed by Michael Niedermayer
parent e42b5362f1
commit aaa1173de7
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
libavcodec/srtdec.c
View File

@ -110,7 +110,7 @@ static const char *srt_to_ass(AVCodecContext *avctx, char *out, char *out_end,
for (j=sptr-2; j>=0; j--) for (j=sptr-2; j>=0; j--)
if (stack[j].param[i][0]) { if (stack[j].param[i][0]) {
out += snprintf(out, out_end-out, out += snprintf(out, out_end-out,
stack[j].param[i]); "%s", stack[j].param[i]);
break; break;
} }
} else { } else {
@ -146,7 +146,7 @@ static const char *srt_to_ass(AVCodecContext *avctx, char *out, char *out_end,
for (i=0; i<PARAM_NUMBER; i++) for (i=0; i<PARAM_NUMBER; i++)
if (stack[sptr].param[i][0]) if (stack[sptr].param[i][0])
out += snprintf(out, out_end-out, out += snprintf(out, out_end-out,
stack[sptr].param[i]); "%s", stack[sptr].param[i]);
} }
} else if (!buffer[1] && strspn(buffer, "bisu") == 1) { } else if (!buffer[1] && strspn(buffer, "bisu") == 1) {
out += snprintf(out, out_end-out, out += snprintf(out, out_end-out,