[FFmpeg-cvslog] r10966 - trunk/libavformat/mpeg.c

[aurel]

Author: aurel
Date: Thu Nov  8 21:53:06 2007
New Revision: 10966

Log:
fix potential buffer over-read

Modified:
   trunk/libavformat/mpeg.c

Modified: trunk/libavformat/mpeg.c
==============================================================================
--- trunk/libavformat/mpeg.c	(original)
+++ trunk/libavformat/mpeg.c	Thu Nov  8 21:53:06 2007
@@ -121,7 +121,7 @@ static int mpegps_read_header(AVFormatCo
     s->ctx_flags |= AVFMTCTX_NOHEADER;
 
     get_buffer(&s->pb, buffer, sizeof(buffer));
-    if ((p=memchr(buffer, 'S', sizeof(buffer))))
+    if ((p=memchr(buffer, 'S', sizeof(buffer)-5)))
         if (!memcmp(p, "Sofdec", 6))
             m->sofdec = 1;
     url_fseek(&s->pb, -(offset_t)sizeof(buffer), SEEK_CUR);