avidec: use actually read size instead of requested size

Fixes CVE-2012-2788
This commit is contained in:
Anton Khirnov 2012-09-28 15:42:29 +02:00
parent eeade678f0
commit 0af49a63c7

View File

@ -1116,7 +1116,7 @@ resync:
}
ast->frame_offset += get_duration(ast, pkt->size);
}
ast->remaining -= size;
ast->remaining -= err;
if(!ast->remaining){
avi->stream_index= -1;
ast->packet_size= 0;