diff options
| author | eugeni <eugeni@b3059339-0415-0410-9bf9-f77b7e298cf2> | 2006-09-02 19:51:26 +0000 |
|---|---|---|
| committer | eugeni <eugeni@b3059339-0415-0410-9bf9-f77b7e298cf2> | 2006-09-02 19:51:26 +0000 |
| commit | 1ad2da1fbbda1581b2162f2e54289f5ed52716f1 (patch) | |
| tree | ecde5088f1655b24e116235771104694d97afcdb /libmpdemux/demux_mkv.c | |
| parent | 62bfae140613321a6e64a0b103e16b527088889b (diff) | |
| download | mpv-1ad2da1fbbda1581b2162f2e54289f5ed52716f1.tar.bz2 mpv-1ad2da1fbbda1581b2162f2e54289f5ed52716f1.tar.xz | |
Fix read beyond the end of allocated memory block.
git-svn-id: svn://svn.mplayerhq.hu/mplayer/trunk@19647 b3059339-0415-0410-9bf9-f77b7e298cf2
Diffstat (limited to 'libmpdemux/demux_mkv.c')
| -rw-r--r-- | libmpdemux/demux_mkv.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libmpdemux/demux_mkv.c b/libmpdemux/demux_mkv.c index cab2d7d54a..7f60cabc04 100644 --- a/libmpdemux/demux_mkv.c +++ b/libmpdemux/demux_mkv.c @@ -2878,7 +2878,7 @@ handle_subtitles(demuxer_t *demuxer, mkv_track_t *track, char *block, ptr1++; /* Newline */ - while (*ptr1 == '\\' && ptr1+1-block < size && (*(ptr1+1)|0x20) == 'n') + while (ptr1+1-block < size && *ptr1 == '\\' && (*(ptr1+1)|0x20) == 'n') { mkv_d->clear_subs_at[mkv_d->subs.lines++] = timecode + block_duration; |