Fix off-by-one error in MS RLE decoder which may result into writing past

picture buffer. Originally committed as revision 18852 to svn://svn.ffmpeg.org/ffmpeg/trunk
16 years ago · b3867c93d1
parent 2d5fabc87a
commit b3867c93d1
1 changed files with 1 additions and 1 deletions
--- a/libavcodec/msrledec.c
+++ b/libavcodec/msrledec.c
@ -134,7 +134,7 @@ static int msrle_decode_8_16_24_32(AVCodecContext *avctx, AVPicture *pic, int de
 {
    uint8_t *output, *output_end;
    const uint8_t* src = data;
-    int p1, p2, line=avctx->height, pos=0, i;
+    int p1, p2, line=avctx->height - 1, pos=0, i;
    uint16_t av_uninit(pix16);
    uint32_t av_uninit(pix32);