comparison mp3.c @ 3540:3dfb35d2ac51 libavformat

All mp3 parsers are buggy fix 2 of n (out of array write, i suspect not exploitable)

3539:4dee13c8073a

        }
        *q = '\0';
        break;

    case 3:  /* UTF-8 */
        len = FFMIN(taglen, dstlen);
        get_buffer(s->pb, dst, len);
        dst[len] = 0;
        break;
    }
}

3540:3dfb35d2ac51

        }
        *q = '\0';
        break;

    case 3:  /* UTF-8 */
        len = FFMIN(taglen, dstlen-1);
        get_buffer(s->pb, dst, len);
        dst[len] = 0;
        break;
    }
}