Commit b3867c93 authored by Kostya Shishkov's avatar Kostya Shishkov
Browse files

Fix off-by-one error in MS RLE decoder which may result into writing past

picture buffer.

Originally committed as revision 18852 to svn://svn.ffmpeg.org/ffmpeg/trunk
parent 2d5fabc8
......@@ -134,7 +134,7 @@ static int msrle_decode_8_16_24_32(AVCodecContext *avctx, AVPicture *pic, int de
{
uint8_t *output, *output_end;
const uint8_t* src = data;
int p1, p2, line=avctx->height, pos=0, i;
int p1, p2, line=avctx->height - 1, pos=0, i;
uint16_t av_uninit(pix16);
uint32_t av_uninit(pix32);
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment