eamad: fix out of array accesses
authorMichael Niedermayer <michaelni@gmx.at>
Sat, 17 Nov 2012 15:26:55 +0000 (16:26 +0100)
committerMichael Niedermayer <michaelni@gmx.at>
Sat, 17 Nov 2012 15:27:18 +0000 (16:27 +0100)
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
libavcodec/eamad.c

index 2805195..e38650e 100644 (file)
@@ -237,7 +237,7 @@ static int decode_frame(AVCodecContext *avctx,
     int chunk_type;
     int inter;
 
-    if (buf_size < 17) {
+    if (buf_size < 26) {
         av_log(avctx, AV_LOG_ERROR, "Input buffer too small\n");
         *data_size = 0;
         return -1;