From 6a4583e92501356c41029dc35092c93126e05018 Mon Sep 17 00:00:00 2001
From: Kostya Shishkov <kostya.shishkov@gmail.com>
Date: Wed, 17 Dec 2008 17:39:35 +0000
Subject: 4l: TIFF stores short strings inside tag, do not interpret it is as
 an offset

Fixes issue 753

Originally committed as revision 16189 to svn://svn.ffmpeg.org/ffmpeg/trunk
---
 libavcodec/tiff.c | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'libavcodec/tiff.c')

diff --git a/libavcodec/tiff.c b/libavcodec/tiff.c
index 7e42aabcbd..7e789b4759 100644
--- a/libavcodec/tiff.c
+++ b/libavcodec/tiff.c
@@ -176,6 +176,11 @@ static int tiff_decode_tag(TiffContext *s, const uint8_t *start, const uint8_t *
             value = off;
             buf = NULL;
             break;
+        case TIFF_STRING:
+            if(count <= 4){
+                buf -= 4;
+                break;
+            }
         default:
             value = -1;
             buf = start + off;
-- 
cgit v1.2.3