Do not read from after the table, fixes CID108 RUN2.

Originally committed as revision 13501 to svn://svn.ffmpeg.org/ffmpeg/trunk

diff --git a/libavformat/tiertexseq.c b/libavformat/tiertexseq.c
index 457185b..bcce674 100644 (file)
--- a/libavformat/tiertexseq.c
+++ b/libavformat/tiertexseq.c
@@ -155,7 +155,7 @@ static int seq_parse_frame_data(SeqDemuxContext *seq, ByteIOContext *pb)
 
     for (i = 0; i < 3; i++) {
         if (offset_table[i] != 0) {
-            for (e = i + 1; e < 4 && offset_table[e] == 0; e++);
+            for (e = i + 1; e < 3 && offset_table[e] == 0; e++);
             err = seq_fill_buffer(seq, pb, buffer_num[1 + i],
               offset_table[i],
               offset_table[e] - offset_table[i]);