Prevent (negative) overflow of rm->remaining_len. This evaluation really only
authorRonald S. Bultje <rsbultje@gmail.com>
Mon, 9 Mar 2009 13:08:19 +0000 (13:08 +0000)
committerRonald S. Bultje <rsbultje@gmail.com>
Mon, 9 Mar 2009 13:08:19 +0000 (13:08 +0000)
has two possible outcomes: either len and rm->remaining_len are the same, in
which case we care about the outcome and it is zero, or rm->remaining_len is
currently not in use and we don't care about the outcome. In that case, len
is positive and rm->remaining_len is zero, which leads to a negative result.
This is confusing and could eventually lead to a sign-flip if we skip a lot
of packets (unlikely, but still). Therefore, just always set it to zero.

Originally committed as revision 17910 to svn://svn.ffmpeg.org/ffmpeg/trunk

libavformat/rmdec.c

index 39e91a5a1c797a13fdc714348376e94d2118e8d4..4be7397174a371a805255ff28026c1ddd52ba902 100644 (file)
@@ -468,7 +468,7 @@ static int sync(AVFormatContext *s, int64_t *timestamp, int *flags, int *stream_
 skip:
             /* skip packet if unknown number */
             url_fskip(pb, len);
-            rm->remaining_len -= len;
+            rm->remaining_len = 0;
             continue;
         }
         *stream_index= i;