sgidec: safer check for buffer overflow

Signed-off-by: Paul B Mahol <onemda@gmail.com>

diff --git a/libavcodec/sgidec.c b/libavcodec/sgidec.c
index a32620b..4f7f8ac 100644 (file)
--- a/libavcodec/sgidec.c
+++ b/libavcodec/sgidec.c
@@ -58,7 +58,7 @@ static int expand_rle_row(SgiState *s, uint8_t *out_buf,
         }
 
         /* Check for buffer overflow. */
-        if (out_buf + pixelstride * (count - 1) >= out_end)
+        if (out_end - out_buf <= pixelstride * (count - 1))
             return AVERROR_INVALIDDATA;
 
         if (pixel & 0x80) {