buf_idx + data_unit_size can overflow, causing the ' buf_size' check to
wrongly fail.
This causes a segmentation fault.
Signed-off-by: Andreas Cadhalpun andreas.cadhal...@googlemail.com
---
libavcodec/diracdec.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git
On Tue, May 05, 2015 at 09:33:08PM +0200, Andreas Cadhalpun wrote:
buf_idx + data_unit_size can overflow, causing the ' buf_size' check to
wrongly fail.
This causes a segmentation fault.
Signed-off-by: Andreas Cadhalpun andreas.cadhal...@googlemail.com
---
libavcodec/diracdec.c | 4 ++--