diff options
author | Aurelien Jacobs <aurel@gnuage.org> | 2011-03-25 01:02:53 +0100 |
---|---|---|
committer | Anton Khirnov <anton@khirnov.net> | 2011-05-12 18:02:28 +0200 |
commit | ea5fa19427fdaba332b908758f5779add7084bbe (patch) | |
tree | cc2ec0c45b98b5ff5d4f09811455e2a4a30a7ad4 /libavcodec/srtdec.c | |
parent | ee81e76db119c4ac4f52404d9d826969975aa77f (diff) | |
download | ffmpeg-ea5fa19427fdaba332b908758f5779add7084bbe.tar.gz |
srtdec: make sure we don't write past the end of buffer
Signed-off-by: Aurelien Jacobs <aurel@gnuage.org>
Signed-off-by: Anton Khirnov <anton@khirnov.net>
Diffstat (limited to 'libavcodec/srtdec.c')
-rw-r--r-- | libavcodec/srtdec.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libavcodec/srtdec.c b/libavcodec/srtdec.c index da625aacbf..677c5501f8 100644 --- a/libavcodec/srtdec.c +++ b/libavcodec/srtdec.c @@ -94,7 +94,7 @@ static const char *srt_to_ass(AVCodecContext *avctx, char *out, char *out_end, break; case '<': tag_close = in[1] == '/'; - if (sscanf(in+tag_close+1, "%128[^>]>%n%c", buffer, &len,&c) >= 2) { + if (sscanf(in+tag_close+1, "%127[^>]>%n%c", buffer, &len,&c) >= 2) { if ((param = strchr(buffer, ' '))) *param++ = 0; if ((!tag_close && sptr < FF_ARRAY_ELEMS(stack)) || |