提交 723229c1 编写于 作者: R Ronald S. Bultje 提交者: Janne Grunau

matroskadec: fix out of bounds write

Signed-off-by: NJanne Grunau <janne-libav@jannau.net>
上级 a62c0f94
......@@ -1783,7 +1783,7 @@ static int matroska_parse_block(MatroskaDemuxContext *matroska, uint8_t *data,
lace_size[n] = lace_size[n - 1] + snum;
total += lace_size[n];
}
lace_size[n] = size - total;
lace_size[laces - 1] = size - total;
break;
}
}
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册