avformat/rtsp: Fix potential pointer overflow in sdp_probe()

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
Michael Niedermayer 2015-03-16 22:40:36 +01:00
parent 1b3b018aa4
commit b425b81fd2

View File

@ -2196,7 +2196,7 @@ static int sdp_probe(AVProbeData *p1)
/* we look for a line beginning "c=IN IP" */ /* we look for a line beginning "c=IN IP" */
while (p < p_end && *p != '\0') { while (p < p_end && *p != '\0') {
if (p + sizeof("c=IN IP") - 1 < p_end && if (sizeof("c=IN IP") - 1 < p_end - p &&
av_strstart(p, "c=IN IP", NULL)) av_strstart(p, "c=IN IP", NULL))
return AVPROBE_SCORE_EXTENSION; return AVPROBE_SCORE_EXTENSION;