Commit dbb7cbf2 authored by Baptiste Coudurier's avatar Baptiste Coudurier

fix possible overflow with memmove

Originally committed as revision 12261 to svn://svn.ffmpeg.org/ffmpeg/trunk
parent a6601d69
......@@ -256,7 +256,7 @@ static int mov_read_dref(MOVContext *c, ByteIOContext *pb, MOV_atom_t atom)
if (type == 2) { // absolute path
dref->path = av_mallocz(len+1);
get_buffer(pb, dref->path, len);
if (!strncmp(dref->path, volume, volume_len)) {
if (len > volume_len && !strncmp(dref->path, volume, volume_len)) {
len -= volume_len;
memmove(dref->path, dref->path+volume_len, len);
dref->path[len] = 0;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment