FFmpeg/libavformat
Andreas Cadhalpun 7c24ca1bda nutdec: fix illegal count check in decode_main_header
The existing check has two problems:
 1) i + count can overflow, so that the check '< 256' returns true.
 2) In the (i == 'N') case occurs a j-- so that the loop runs once more.

This can trigger the assertion 'nut->header_len[0] == 0' or cause
segmentation faults or infinite hangs.

Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
2015-04-28 22:56:14 +02:00
..
2015-04-07 22:50:07 +02:00
2015-03-27 18:29:46 +01:00
2015-03-06 21:35:00 +01:00
2015-02-26 02:06:10 +01:00
2015-03-26 03:10:27 +01:00
2015-04-23 12:56:31 +02:00
2015-03-27 18:29:46 +01:00
2015-03-27 18:29:46 +01:00
2015-04-23 13:55:55 +02:00
2015-04-24 03:43:56 +02:00
2015-04-11 13:51:03 +02:00