Commit d1729c37 authored by Anton Khirnov's avatar Anton Khirnov Committed by Reinhard Tartler

avidec: use actually read size instead of requested size

Fixes CVE-2012-2788
(cherry picked from commit 0af49a63)
Signed-off-by: 's avatarReinhard Tartler <siretart@tauware.de>
parent c28c631d
......@@ -780,7 +780,7 @@ resync:
else
ast->frame_offset++;
}
ast->remaining -= size;
ast->remaining -= err;
if(!ast->remaining){
avi->stream_index= -1;
ast->packet_size= 0;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment