avformat/mpegvideodec: fix hypothetical pointer overflow in mpegvideo_probe()

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
10 years ago · 32c4b504b4
parent 84d8b4fb81
commit 32c4b504b4
1 changed files with 2 additions and 2 deletions
--- a/libavformat/mpegvideodec.c
+++ b/libavformat/mpegvideodec.c
@ -52,11 +52,11 @@ static int mpegvideo_probe(AVProbeData *p)
                j = -1;
                if (ptr[j + 8] & 2)
                    j+= 64;
-                if (ptr + j >= end)
+                if (j >= end - ptr)
                    break;
                if (ptr[j + 8] & 1)
                    j+= 64;
-                if (ptr + j >= end)
+                if (j >= end - ptr)
                    break;
                if (AV_RB24(ptr + j + 9) & 0xFFFFFE)
                    break;