On Wed, Jun 22, 2016 at 10:28:14AM +0200, Clément Bœsch wrote:
> On Mon, Jun 20, 2016 at 04:39:47PM +0200, Michael Niedermayer wrote:
> [...]
> > > +static inline int pnm_probe(const AVProbeData *p)
> > > +{
> > > +    const uint8_t *b = p->buf;
> > > +
> > > +    while (b[2] == '\r')
> > > +        b++;
> > 
> > shouldnt this check buf_size ?
> > 
> 
> Inside AVProbeData struct declaration:
>   unsigned char *buf; /**< Buffer must have AVPROBE_PADDING_SIZE of extra 
> allocated bytes filled with zero. */
> 
> So in the worst case it will reach a zero, and then bail out because it's
> not a '\n'

patch ok

maybe the zeroness of the padding should be checked somewhere


[...]

-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

The worst form of inequality is to try to make unequal things equal.
-- Aristotle

Attachment: signature.asc
Description: Digital signature

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
http://ffmpeg.org/mailman/listinfo/ffmpeg-devel

Reply via email to