From 1651493ae0e20c91b3a46e950339fa1eb6d977ea Mon Sep 17 00:00:00 2001 From: Vincent Penquerc'h Date: Thu, 19 Jan 2012 15:26:25 +0000 Subject: [PATCH] a52dec: fix read buffer overflow upon syncing The wrong size was being decremented, leading to a runaway read loop. --- ext/a52dec/gsta52dec.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ext/a52dec/gsta52dec.c b/ext/a52dec/gsta52dec.c index 18ea1da..3ada93f 100644 --- a/ext/a52dec/gsta52dec.c +++ b/ext/a52dec/gsta52dec.c @@ -309,7 +309,7 @@ gst_a52dec_parse (GstAudioDecoder * bdec, GstAdapter * adapter, bit_rate = a52dec->bit_rate; sample_rate = a52dec->sample_rate; flags = 0; - while (av >= 7) { + while (size >= 7) { length = a52_syncinfo (data, &flags, &sample_rate, &bit_rate); if (length == 0) { -- 2.7.4