sgidec: safer check for buffer overflow

Signed-off-by: Paul B Mahol <onemda@gmail.com>
12 years ago · 86e722ab97
parent 997e2b59e3
commit 86e722ab97
1 changed files with 1 additions and 1 deletions
--- a/libavcodec/sgidec.c
+++ b/libavcodec/sgidec.c
@ -58,7 +58,7 @@ static int expand_rle_row(SgiState *s, uint8_t *out_buf,
        }

        /* Check for buffer overflow. */
-        if (out_buf + pixelstride * (count - 1) >= out_end)
+        if (out_end - out_buf <= pixelstride * (count - 1))
            return AVERROR_INVALIDDATA;

        if (pixel & 0x80) {