From f83687bc78bea7ede4859d363c24a28f0473a5db Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Sat, 3 Mar 2012 21:03:11 +0100 Subject: [PATCH] mpegts: fix stack array overread in read_sl_header() Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer --- libavformat/mpegts.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libavformat/mpegts.c b/libavformat/mpegts.c index e6c353df0e..460372c116 100644 --- a/libavformat/mpegts.c +++ b/libavformat/mpegts.c @@ -1822,7 +1822,7 @@ static int read_packet(AVFormatContext *s, uint8_t *buf, int raw_packet_size) static int handle_packets(MpegTSContext *ts, int nb_packets) { AVFormatContext *s = ts->stream; - uint8_t packet[TS_PACKET_SIZE]; + uint8_t packet[TS_PACKET_SIZE + FF_INPUT_BUFFER_PADDING_SIZE]; int packet_num, ret = 0; if (avio_tell(s->pb) != ts->last_pos) {