All mp3 parsers are buggy fix 2 of n (out of array write, i suspect not exploitable)

Originally committed as revision 14070 to svn://svn.ffmpeg.org/ffmpeg/trunk
This commit is contained in:
Michael Niedermayer 2008-07-04 22:04:41 +00:00
parent d5ae45841f
commit 0328995893

View File

@ -205,7 +205,7 @@ static void id3v2_read_ttag(AVFormatContext *s, int taglen, char *dst, int dstle
break;
case 3: /* UTF-8 */
len = FFMIN(taglen, dstlen);
len = FFMIN(taglen, dstlen-1);
get_buffer(s->pb, dst, len);
dst[len] = 0;
break;