comparison mpegaudiodec.c @ 3641:b325c92e7bed libavcodec

check the validity of the amount of the remaining bytes in the bitsteam before memcpy

3640:c5dffafebdff

        if(s->in_gb.buffer)
            s->gb= s->in_gb;
        align_get_bits(&s->gb);
        assert((get_bits_count(&s->gb) & 7) == 0);
        s->last_buf_size= (s->gb.size_in_bits - get_bits_count(&s->gb))>>3;
        memcpy(s->last_buf, s->gb.buffer + (get_bits_count(&s->gb)>>3), s->last_buf_size);

        break;
    }
#if defined(DEBUG)
    for(i=0;i<nb_frames;i++) {

3641:b325c92e7bed

        if(s->in_gb.buffer)
            s->gb= s->in_gb;
        align_get_bits(&s->gb);
        assert((get_bits_count(&s->gb) & 7) == 0);
        s->last_buf_size= (s->gb.size_in_bits - get_bits_count(&s->gb))>>3;
        if(s->last_buf_size <0 || s->last_buf_size > BACKSTEP_SIZE || nb_frames<0)
            s->last_buf_size= FFMIN(BACKSTEP_SIZE, buf_size - HEADER_SIZE);
        assert(s->last_buf_size <= buf_size - HEADER_SIZE);
        memcpy(s->last_buf, s->gb.buffer + buf_size - HEADER_SIZE - s->last_buf_size, s->last_buf_size);

        break;
    }
#if defined(DEBUG)
    for(i=0;i<nb_frames;i++) {