From 11cc2092269a36dc7a98545397e110fa8c08e18a Mon Sep 17 00:00:00 2001
From: Michael Niedermayer <michaelni@gmx.at>
Date: Wed, 28 Mar 2012 07:25:06 +0200
Subject: [PATCH] lzw(gif): Fix overread

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
---
 libavcodec/lzw.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libavcodec/lzw.c b/libavcodec/lzw.c
index 185a05d6ab..2db0d67e7f 100644
--- a/libavcodec/lzw.c
+++ b/libavcodec/lzw.c
@@ -101,7 +101,7 @@ void ff_lzw_decode_tail(LZWState *p)
     struct LZWState *s = (struct LZWState *)p;
 
     if(s->mode == FF_LZW_GIF) {
-        while(s->pbuf < s->ebuf && s->bs>0){
+        while(s->pbuf + s->bs < s->ebuf && s->bs>0){
             s->pbuf += s->bs;
             s->bs = *s->pbuf++;
         }