From f46185c289baf8bf98e8970fb0cbb5f6f56c7837 Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Tue, 8 May 2012 03:45:17 +0200 Subject: mp3demux: fix off by 1 error Signed-off-by: Michael Niedermayer --- libavformat/mp3dec.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'libavformat/mp3dec.c') diff --git a/libavformat/mp3dec.c b/libavformat/mp3dec.c index edfee164b4..8d92aec96e 100644 --- a/libavformat/mp3dec.c +++ b/libavformat/mp3dec.c @@ -183,7 +183,7 @@ static int mp3_read_packet(AVFormatContext *s, AVPacket *pkt) return AVERROR_EOF; } - if (ret > ID3v1_TAG_SIZE && + if (ret >= ID3v1_TAG_SIZE && memcmp(&pkt->data[ret - ID3v1_TAG_SIZE], "TAG", 3) == 0) ret -= ID3v1_TAG_SIZE; -- cgit v1.2.3