matroskadec: fix out of bounds write

Signed-off-by: Janne Grunau <janne-libav@jannau.net>
13 years ago · 723229c11f
parent a62c0f94ee
commit 723229c11f
1 changed files with 1 additions and 1 deletions
--- a/libavformat/matroskadec.c
+++ b/libavformat/matroskadec.c
@ -1783,7 +1783,7 @@ static int matroska_parse_block(MatroskaDemuxContext *matroska, uint8_t *data,
                        lace_size[n] = lace_size[n - 1] + snum;
                        total += lace_size[n];
                    }
-                    lace_size[n] = size - total;
+                    lace_size[laces - 1] = size - total;
                    break;
                }
            }