On 10/02/16 16:44, Diego Biurrun wrote:
> On Tue, Feb 09, 2016 at 11:18:07PM +0100, Luca Barbato wrote:
>> --- a/libavformat/mov.c
>> +++ b/libavformat/mov.c
>> @@ -1781,7 +1781,7 @@ int ff_mov_read_stsd_entries(MOVContext *c, 
>> AVIOContext *pb, int entries)
>>          int64_t start_pos = avio_tell(pb);
>> -        uint32_t size = avio_rb32(pb); /* size */
>> +        int64_t size    = avio_rb32(pb); /* size */
> 
> avio_rb32 returns unsigned int, so this seems quite suspicious...
> 

and the value then is added/subtracted to be use as int64_t offset...


lu

_______________________________________________
libav-devel mailing list
[email protected]
https://lists.libav.org/mailman/listinfo/libav-devel

Reply via email to