#509 closed defect (invalid)
Off by one on read
| Reported by: | Owned by: | ||
|---|---|---|---|
| Priority: | normal | Component: | libavcodec |
| Version: | unspecified | Severity: | normal |
| Keywords: | Cc: | ||
| Blocked By: | Blocking: | ||
| Reproduced by developer: | no | Analyzed by developer: | no |
Description
In libavcodec/h264.c line 7911, the loop condition is 'i<=buf_size' when it
should be 'i<buf_size'.
In the case where i == buf_size, an invalid read will be done on the last line
of the loop.
Note:
See TracTickets
for help on using tickets.
Never mind about this. The problem is something else.