From ea5fa19427fdaba332b908758f5779add7084bbe Mon Sep 17 00:00:00 2001 From: Aurelien Jacobs Date: Fri, 25 Mar 2011 01:02:53 +0100 Subject: srtdec: make sure we don't write past the end of buffer Signed-off-by: Aurelien Jacobs Signed-off-by: Anton Khirnov --- libavcodec/srtdec.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'libavcodec/srtdec.c') diff --git a/libavcodec/srtdec.c b/libavcodec/srtdec.c index da625aacbf..677c5501f8 100644 --- a/libavcodec/srtdec.c +++ b/libavcodec/srtdec.c @@ -94,7 +94,7 @@ static const char *srt_to_ass(AVCodecContext *avctx, char *out, char *out_end, break; case '<': tag_close = in[1] == '/'; - if (sscanf(in+tag_close+1, "%128[^>]>%n%c", buffer, &len,&c) >= 2) { + if (sscanf(in+tag_close+1, "%127[^>]>%n%c", buffer, &len,&c) >= 2) { if ((param = strchr(buffer, ' '))) *param++ = 0; if ((!tag_close && sptr < FF_ARRAY_ELEMS(stack)) || -- cgit v1.2.3