[FFmpeg-cvslog] avidec: use actually read size instead of requested size

[Anton Khirnov]

ffmpeg | branch: release/0.7 | Anton Khirnov <anton at khirnov.net> | Fri Sep 28 15:42:29 2012 +0200| [05f5a2eb62db2ffb802b2c317cb48c769ab02b3b] | committer: Reinhard Tartler

avidec: use actually read size instead of requested size

Fixes CVE-2012-2788
(cherry picked from commit 0af49a63c7f87876486ab09482d5b26b95abce60)

Signed-off-by: Reinhard Tartler <siretart at tauware.de>

> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=05f5a2eb62db2ffb802b2c317cb48c769ab02b3b
---

 libavformat/avidec.c |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libavformat/avidec.c b/libavformat/avidec.c
index 85fc794..a35290b1 100644
--- a/libavformat/avidec.c
+++ b/libavformat/avidec.c
@@ -984,7 +984,7 @@ resync:
             }
             ast->frame_offset += get_duration(ast, pkt->size);
         }
-        ast->remaining -= size;
+        ast->remaining -= err;
         if(!ast->remaining){
             avi->stream_index= -1;
             ast->packet_size= 0;