Change buffer check to avoid an unlikely pointer arithmetic overflow.
authorReimar Döffinger <Reimar.Doeffinger@gmx.de>
Fri, 17 Apr 2009 19:49:55 +0000 (19:49 +0000)
committerReimar Döffinger <Reimar.Doeffinger@gmx.de>
Fri, 17 Apr 2009 19:49:55 +0000 (19:49 +0000)
Originally committed as revision 18596 to svn://svn.ffmpeg.org/ffmpeg/trunk

libavcodec/xan.c

index 99feba0..b5303eb 100644 (file)
@@ -104,7 +104,7 @@ static int xan_huffman_decode(unsigned char *dest, const unsigned char *src,
         val = src[val - 0x17 + get_bits1(&gb) * byte];
 
         if ( val < 0x16 ) {
         val = src[val - 0x17 + get_bits1(&gb) * byte];
 
         if ( val < 0x16 ) {
-            if (dest + 1 > dest_end)
+            if (dest >= dest_end)
                 return 0;
             *dest++ = val;
             val = ival;
                 return 0;
             *dest++ = val;
             val = ival;