the data_start is after reading 12 bytes and if its subtracted
at the very end the intermediate might overflow
Signed-off-by: Michael Niedermayer <mich...@niedermayer.cc>
---
libavcodec/dxv.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/libavcodec/dxv.c b/libavcodec/dxv.c
index 3fb50e96d0..1486de7341 100644
--- a/libavcodec/dxv.c
+++ b/libavcodec/dxv.c
@@ -783,7 +783,7 @@ static int dxv_decompress_cocg(DXVContext *ctx,
GetByteContext *gb,
return ret;
}
- bytestream2_seek(gb, data_start + op_offset + skip0 + skip1 - 12,
SEEK_SET);
+ bytestream2_seek(gb, data_start - 12 + op_offset + skip0 + skip1,
SEEK_SET);
return 0;
}
--
2.23.0
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel
To unsubscribe, visit link above, or email
ffmpeg-devel-requ...@ffmpeg.org with subject "unsubscribe".
