Module: libav Branch: release/0.8 Commit: 0582b8e3eabb4b7d6f637fcd294d6ae43d24b61a
Author: Anton Khirnov <[email protected]> Committer: Reinhard Tartler <[email protected]> Date: Fri Sep 28 15:42:29 2012 +0200 avidec: use actually read size instead of requested size Fixes CVE-2012-2788 (cherry picked from commit 0af49a63c7f87876486ab09482d5b26b95abce60) Signed-off-by: Reinhard Tartler <[email protected]> --- libavformat/avidec.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/libavformat/avidec.c b/libavformat/avidec.c index b4ccfb5..13a39c0 100644 --- a/libavformat/avidec.c +++ b/libavformat/avidec.c @@ -1116,7 +1116,7 @@ resync: } ast->frame_offset += get_duration(ast, pkt->size); } - ast->remaining -= size; + ast->remaining -= err; if(!ast->remaining){ avi->stream_index= -1; ast->packet_size= 0; _______________________________________________ libav-commits mailing list [email protected] https://lists.libav.org/mailman/listinfo/libav-commits
