1
0
mirror of https://github.com/FFmpeg/FFmpeg.git synced 2025-01-29 22:00:58 +02:00
FFmpeg/libavformat
Reinhard Tartler ef84190a1a Fix possible buffer over-read in vorbis_comment, fix it double to be sure.
First, make s signed, so that comparisons against end - p will not be made as
unsigned, making the check incorrectly pass if p is beyond end.
Also ensure that p will never be > end, so the code is correct also if
buf is not padded.

backported r20014 by reimar


Originally committed as revision 21711 to svn://svn.ffmpeg.org/ffmpeg/branches/0.5
2010-02-09 18:51:11 +00:00
..
2009-02-02 23:43:12 +00:00
2008-09-26 19:42:21 +00:00
2009-01-16 01:20:31 +00:00
2009-02-21 20:57:46 +00:00
2008-12-11 22:34:14 +00:00
2008-12-11 22:34:14 +00:00
2009-02-26 08:45:59 +00:00
2009-02-12 02:17:16 +00:00
2009-02-28 17:31:25 +00:00
2008-12-13 21:58:17 +00:00
2010-02-01 16:00:09 +00:00
2009-02-28 23:34:16 +00:00
2009-02-12 17:26:06 +00:00
2009-02-08 21:42:06 +00:00
2009-02-18 00:02:38 +00:00
2008-12-11 19:06:24 +00:00
2009-02-27 23:10:34 +00:00
2009-02-27 23:12:14 +00:00
2008-12-03 15:23:30 +00:00
2008-11-06 01:50:56 +00:00
2008-11-06 01:50:56 +00:00
2009-03-01 16:35:25 +00:00
2009-03-01 15:28:56 +00:00
2009-02-17 21:40:38 +00:00
2009-02-17 21:40:38 +00:00
2009-02-17 21:40:38 +00:00
2009-02-26 22:39:53 +00:00
2009-02-28 19:34:50 +00:00
2009-02-16 14:45:05 +00:00
2009-02-12 17:26:06 +00:00
2008-08-13 18:32:16 +00:00
2008-12-11 22:34:14 +00:00
2008-12-11 22:34:14 +00:00
2009-02-26 22:35:26 +00:00