From 0399fe0fd23ff272282dd093cc2720deb6f87ea8 Mon Sep 17 00:00:00 2001
From: "Ronald S. Bultje" <rsbultje@gmail.com>
Date: Wed, 28 Mar 2012 20:00:38 -0700
Subject: lzw: fix potential integer overflow.

---
 libavcodec/lzw.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'libavcodec/lzw.c')

diff --git a/libavcodec/lzw.c b/libavcodec/lzw.c
index b674d4e296..8761510283 100644
--- a/libavcodec/lzw.c
+++ b/libavcodec/lzw.c
@@ -102,7 +102,7 @@ void ff_lzw_decode_tail(LZWState *p)
 
     if(s->mode == FF_LZW_GIF) {
         while (s->bs > 0) {
-            if (s->pbuf + s->bs >= s->ebuf) {
+            if (s->bs >= s->ebuf - s->pbuf) {
                 s->pbuf = s->ebuf;
                 break;
             } else {
-- 
cgit v1.2.3