diff options
author | reimar <reimar@b3059339-0415-0410-9bf9-f77b7e298cf2> | 2005-10-05 14:55:06 +0000 |
---|---|---|
committer | reimar <reimar@b3059339-0415-0410-9bf9-f77b7e298cf2> | 2005-10-05 14:55:06 +0000 |
commit | 6880f9a572e0cbb8a7f8a987c8d6fc4b698d3393 (patch) | |
tree | d7f2d360d890f4c8038223d0f5d8395ea75e7dff /libmpdemux/demux_mov.c | |
parent | 6b22e084f017c9a64ac581188628f4c29c2fc611 (diff) | |
download | mpv-6880f9a572e0cbb8a7f8a987c8d6fc4b698d3393.tar.bz2 mpv-6880f9a572e0cbb8a7f8a987c8d6fc4b698d3393.tar.xz |
10l, off by one error in last patch (codecdata length sanity check),
caused crashes with qdmc audio.
git-svn-id: svn://svn.mplayerhq.hu/mplayer/trunk@16680 b3059339-0415-0410-9bf9-f77b7e298cf2
Diffstat (limited to 'libmpdemux/demux_mov.c')
-rw-r--r-- | libmpdemux/demux_mov.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libmpdemux/demux_mov.c b/libmpdemux/demux_mov.c index 61a8e9b96a..6b061560f7 100644 --- a/libmpdemux/demux_mov.c +++ b/libmpdemux/demux_mov.c @@ -712,7 +712,7 @@ static void lschunks(demuxer_t* demuxer,int level,off_t endpos,mov_track_t* trak sh->codecdata = (unsigned char *)malloc(sh->codecdata_len); memcpy(sh->codecdata, &trak->stdata[52+char2int(trak->stdata,52)], sh->codecdata_len); } else { - if (len > 8 && len + 44 < trak->stdata_len) { + if (len > 8 && len + 44 <= trak->stdata_len) { sh->codecdata_len = len-8; sh->codecdata = trak->stdata+44+8; } |