faxcompr: fix out of array read

Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 5891e454a6) Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 55b3e408fa) Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
2012-09-07 12:35:41 +02:00
parent fcb8bbf264
commit d36c706b86
1 changed files with 1 additions and 1 deletions
--- a/libavcodec/faxcompr.c
+++ b/libavcodec/faxcompr.c
@@ -228,7 +228,7 @@ static int decode_group3_2d_line(AVCodecContext *avctx, GetBitContext *gb,
            mode = !mode;
        }
        //sync line pointers
-        while(run_off <= offs){
+        while(offs < width && run_off <= offs){
            run_off += *ref++;
            run_off += *ref++;
        }