[FFmpeg-cvslog] r16693 - trunk/libavformat/mp3.c

[alexc]

Author: alexc
Date: Tue Jan 20 09:00:39 2009
New Revision: 16693

Log:
Fix a read past end of buffer crash in the mp3 probe

Modified:
   trunk/libavformat/mp3.c

Modified: trunk/libavformat/mp3.c
==============================================================================
--- trunk/libavformat/mp3.c	Tue Jan 20 08:42:14 2009	(r16692)
+++ trunk/libavformat/mp3.c	Tue Jan 20 09:00:39 2009	(r16693)
@@ -364,7 +364,7 @@ static int mp3_read_probe(AVProbeData *p
 
     max_frames = 0;
     buf = buf0;
-    end = buf + p->buf_size - sizeof(uint32_t);
+    end = p->buf + p->buf_size - sizeof(uint32_t);
 
     for(; buf < end; buf= buf2+1) {
         buf2 = buf;