Commit 03289958 authored by Michael Niedermayer's avatar Michael Niedermayer
Browse files

All mp3 parsers are buggy fix 2 of n (out of array write, i suspect not exploitable)

Originally committed as revision 14070 to svn://svn.ffmpeg.org/ffmpeg/trunk
parent d5ae4584
......@@ -205,7 +205,7 @@ static void id3v2_read_ttag(AVFormatContext *s, int taglen, char *dst, int dstle
break;
case 3: /* UTF-8 */
len = FFMIN(taglen, dstlen);
len = FFMIN(taglen, dstlen-1);
get_buffer(s->pb, dst, len);
dst[len] = 0;
break;
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment