From a5ee04c3e0f3c0f84089100b65bb09552ce1bdf8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Reimar=20D=C3=B6ffinger?= <Reimar.Doeffinger@gmx.de>
Date: Sun, 14 Jan 2007 16:11:10 +0000
Subject: [PATCH] Buffer for get_bits must be padded because readers may
 overread.

Originally committed as revision 7477 to svn://svn.ffmpeg.org/ffmpeg/trunk
---
 libavcodec/mpc.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libavcodec/mpc.c b/libavcodec/mpc.c
index df009f4876..a500479c0e 100644
--- a/libavcodec/mpc.c
+++ b/libavcodec/mpc.c
@@ -231,7 +231,7 @@ static int mpc7_decode_frame(AVCodecContext * avctx,
         av_log(avctx, AV_LOG_ERROR, "Too small buffer passed (%i bytes)\n", buf_size);
     }
 
-    bits = av_malloc((buf_size - 1) & ~3);
+    bits = av_malloc(((buf_size - 1) & ~3) + FF_INPUT_BUFFER_PADDING_SIZE);
     c->dsp.bswap_buf(bits, buf + 4, (buf_size - 4) >> 2);
     init_get_bits(&gb, bits, (buf_size - 4)* 8);
     skip_bits(&gb, buf[0]);