Reinhard Tartler ef84190a1a Fix possible buffer over-read in vorbis_comment, fix it double to be sure. ...

First, make s signed, so that comparisons against end - p will not be made as
unsigned, making the check incorrectly pass if p is beyond end.
Also ensure that p will never be > end, so the code is correct also if
buf is not padded.

backported r20014 by reimar


Originally committed as revision 21711 to svn://svn.ffmpeg.org/ffmpeg/branches/0.5

2010-02-09 18:51:11 +00:00

6.3 KiB

Raw Blame History

View Raw