[FFmpeg-cvslog] r18852 - trunk/libavcodec/msrledec.c

[kostya]

Author: kostya
Date: Sat May 16 08:39:08 2009
New Revision: 18852

Log:
Fix off-by-one error in MS RLE decoder which may result into writing past
picture buffer.

Modified:
   trunk/libavcodec/msrledec.c

Modified: trunk/libavcodec/msrledec.c
==============================================================================
--- trunk/libavcodec/msrledec.c	Sat May 16 06:08:34 2009	(r18851)
+++ trunk/libavcodec/msrledec.c	Sat May 16 08:39:08 2009	(r18852)
@@ -134,7 +134,7 @@ static int msrle_decode_8_16_24_32(AVCod
 {
     uint8_t *output, *output_end;
     const uint8_t* src = data;
-    int p1, p2, line=avctx->height, pos=0, i;
+    int p1, p2, line=avctx->height - 1, pos=0, i;
     uint16_t av_uninit(pix16);
     uint32_t av_uninit(pix32);