[FFmpeg-devel] [PATCH] mpegvideo_parser: fix buffer access beyond end

[Wolfram Gloger]

Author: Wolfram Gloger <wmglo at dent.med.uni-muenchen.de>
Date:   Wed Dec 5 18:46:55 2012 +0100

    mpegvideo_parser: fix buffer access beyond end

diff --git a/libavcodec/mpegvideo_parser.c b/libavcodec/mpegvideo_parser.c
index c112a94..35a9160 100644
--- a/libavcodec/mpegvideo_parser.c
+++ b/libavcodec/mpegvideo_parser.c
@@ -56,6 +56,7 @@ static void mpegvideo_extract_headers(AVCodecParserContext *s,
         case PICTURE_START_CODE:
             if (bytes_left >= 2) {
                 s->pict_type = (buf[1] >> 3) & 7;
+                if (bytes_left >= 4)
                 vbv_delay = ((buf[1] & 0x07) << 13) | (buf[2] << 5) | (buf[3]  >> 3);
             }
             break;