comparison rtpdec_asf.c @ 6377:7eafa931f4e4 libavformat

Prevent overflow on random input.

6376:91076395b8d3

                int cur_len = start_off + len_off - off;
                int prev_len = out_len;
                out_len += cur_len;
                asf->buf = av_realloc(asf->buf, out_len);
                memcpy(asf->buf + prev_len, buf + off, cur_len);
                url_fskip(pb, cur_len);
            }
        }

        init_packetizer(pb, asf->buf, out_len);

6377:7eafa931f4e4

                int cur_len = start_off + len_off - off;
                int prev_len = out_len;
                out_len += cur_len;
                asf->buf = av_realloc(asf->buf, out_len);
                memcpy(asf->buf + prev_len, buf + off,
                       FFMIN(cur_len, len - off));
                url_fskip(pb, cur_len);
            }
        }

        init_packetizer(pb, asf->buf, out_len);