[FFmpeg-cvslog] r14070 - trunk/libavformat/mp3.c

[michael]

Author: michael
Date: Sat Jul  5 00:04:41 2008
New Revision: 14070

Log:
All mp3 parsers are buggy fix 2 of n (out of array write, i suspect not exploitable)


Modified:
   trunk/libavformat/mp3.c

Modified: trunk/libavformat/mp3.c
==============================================================================
--- trunk/libavformat/mp3.c	(original)
+++ trunk/libavformat/mp3.c	Sat Jul  5 00:04:41 2008
@@ -205,7 +205,7 @@ static void id3v2_read_ttag(AVFormatCont
         break;
 
     case 3:  /* UTF-8 */
-        len = FFMIN(taglen, dstlen);
+        len = FFMIN(taglen, dstlen-1);
         get_buffer(s->pb, dst, len);
         dst[len] = 0;
         break;