You've already forked FFmpeg
mirror of
https://github.com/FFmpeg/FFmpeg.git
synced 2025-07-16 22:42:38 +02:00
lavc/movtextdec: keep the min size instead of max to fix overread.
Fixes Ticket #2087.
This commit is contained in:
@ -83,7 +83,7 @@ static int mov_text_decode_frame(AVCodecContext *avctx,
|
||||
* In complex cases, there are style descriptors appended to the string
|
||||
* so we can't just assume the packet size is the string size.
|
||||
*/
|
||||
end = ptr + FFMAX(2 + AV_RB16(ptr), avpkt->size);
|
||||
end = ptr + FFMIN(2 + AV_RB16(ptr), avpkt->size);
|
||||
ptr += 2;
|
||||
|
||||
ts_start = av_rescale_q(avpkt->pts,
|
||||
|
Reference in New Issue
Block a user