[MN-dev] [mndiff]: r108 - trunk/noe/mina.c

michael subversion at mplayerhq.hu
Wed Oct 22 19:33:51 CEST 2008


Author: michael
Date: Wed Oct 22 19:33:50 2008
New Revision: 108

Log:
Ensure that reading between data and padded size does not overflow the buffer.


Modified:
   trunk/noe/mina.c

Modified: trunk/noe/mina.c
==============================================================================
--- trunk/noe/mina.c	(original)
+++ trunk/noe/mina.c	Wed Oct 22 19:33:50 2008
@@ -64,7 +64,7 @@ static int read(uint8_t *buf, int64_t po
                 return -1;
             }
         }else if(pos < paddedsize){
-            len2= paddedsize - pos;
+            len2= MIN(len, paddedsize-pos);
             memset(buf, 0, len2);
         }else{
             int64_t pos2= pos - paddedsize;



More information about the Mndiff-dev mailing list