summaryrefslogtreecommitdiff
path: root/libavcodec/4xm.c
diff options
context:
space:
mode:
authorAneesh Dogra <lionaneesh@gmail.com>2012-01-05 00:10:01 +0530
committerRonald S. Bultje <rsbultje@gmail.com>2012-01-04 21:10:11 -0800
commit4b84f682232205eee84e0e6bea1858be8e234129 (patch)
tree649230b62258c0ad6f6c149d5c9f544454180497 /libavcodec/4xm.c
parent893f1376793e67e4be76d074d51313e59805bd40 (diff)
4xm: pass the correct remaining buffer size to decode_i2_frame().
frame_size is the number of bytes left in the packet, so if we are passing buf-4 we can safely read frame_size+4 bytes. Signed-off-by: Ronald S. Bultje <rsbultje@gmail.com>
Diffstat (limited to 'libavcodec/4xm.c')
-rw-r--r--libavcodec/4xm.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/libavcodec/4xm.c b/libavcodec/4xm.c
index 7cda26ed30..cfb8279870 100644
--- a/libavcodec/4xm.c
+++ b/libavcodec/4xm.c
@@ -786,7 +786,7 @@ static int decode_frame(AVCodecContext *avctx,
if(frame_4cc == AV_RL32("ifr2")){
p->pict_type= AV_PICTURE_TYPE_I;
- if(decode_i2_frame(f, buf-4, frame_size) < 0)
+ if(decode_i2_frame(f, buf-4, frame_size + 4) < 0)
return -1;
}else if(frame_4cc == AV_RL32("ifrm")){
p->pict_type= AV_PICTURE_TYPE_I;