From: Aurelien Jacobs <aurel@gnuage.org>
Date: Thu, 8 Nov 2007 20:53:06 +0000 (+0000)
Subject: fix potential buffer over-read
X-Git-Tag: v0.5~7013
X-Git-Url: http://git.osdn.net/view?a=commitdiff_plain;h=73039e0fb4e5fbd13602c866ec98e097a777f1f5;p=coroid%2Flibav_saccubus.git

fix potential buffer over-read

Originally committed as revision 10966 to svn://svn.ffmpeg.org/ffmpeg/trunk
---

diff --git a/libavformat/mpeg.c b/libavformat/mpeg.c
index 34168ba78..076cc8fea 100644
--- a/libavformat/mpeg.c
+++ b/libavformat/mpeg.c
@@ -121,7 +121,7 @@ static int mpegps_read_header(AVFormatContext *s,
     s->ctx_flags |= AVFMTCTX_NOHEADER;
 
     get_buffer(&s->pb, buffer, sizeof(buffer));
-    if ((p=memchr(buffer, 'S', sizeof(buffer))))
+    if ((p=memchr(buffer, 'S', sizeof(buffer)-5)))
         if (!memcmp(p, "Sofdec", 6))
             m->sofdec = 1;
     url_fseek(&s->pb, -(offset_t)sizeof(buffer), SEEK_CUR);