提交 c152c983 编写于 作者: Z Zdenek Kabelac

* simple fix to avoid memcpy with len < 0

Originally committed as revision 180 to svn://svn.ffmpeg.org/ffmpeg/trunk
上级 525782f3
......@@ -2268,11 +2268,13 @@ static int decode_frame(AVCodecContext * avctx,
len = HEADER_SIZE - len;
if (len > buf_size)
len = buf_size;
else if (len > 0) {
memcpy(s->inbuf_ptr, buf_ptr, len);
buf_ptr += len;
s->inbuf_ptr += len;
buf_size -= len;
if ((s->inbuf_ptr - s->inbuf) == HEADER_SIZE) {
s->inbuf_ptr += len;
}
if ((s->inbuf_ptr - s->inbuf) >= HEADER_SIZE) {
got_header:
header = (s->inbuf[0] << 24) | (s->inbuf[1] << 16) |
(s->inbuf[2] << 8) | s->inbuf[3];
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册