Fix read after the end of allocated buffer.

git-svn-id: svn://svn.mplayerhq.hu/mplayer/trunk@29423 b3059339-0415-0410-9bf9-f77b7e298cf2

1 files changed, 2 insertions, 0 deletions

diff --git a/libass/ass.h b/libass/ass.h
index e98b4264b7..12f16fef5d 100644
--- a/libass/ass.h
+++ b/libass/ass.h
@@ -34,6 +34,8 @@ typedef struct ass_image_s {
 	int w, h; // bitmap width/height
 	int stride; // bitmap stride
 	unsigned char* bitmap; // 1bpp stride*h alpha buffer
+	                       // Actual bitmap size may be as low as
+	                       // stride * (h-1) + w
 	uint32_t color; // RGBA
 	int dst_x, dst_y; // bitmap placement inside the video frame