Mercurial > libavformat.hg

diff mp3.c @ 3540:3dfb35d2ac51 libavformat

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
All mp3 parsers are buggy fix 2 of n (out of array write, i suspect not exploitable)
author michael
date Fri, 04 Jul 2008 22:04:41 +0000
parents 4dee13c8073a
children bc473761b9e7
line wrap: on
line diff
--- a/mp3.c	Fri Jul 04 22:00:35 2008 +0000
+++ b/mp3.c	Fri Jul 04 22:04:41 2008 +0000
@@ -205,7 +205,7 @@
         break;
 
     case 3:  /* UTF-8 */
-        len = FFMIN(taglen, dstlen);
+        len = FFMIN(taglen, dstlen-1);
         get_buffer(s->pb, dst, len);
         dst[len] = 0;
         break;