# HG changeset patch
# User alexc
# Date 1232438439 0
# Node ID 35c8abd32d93f711ce1aebc418ade1941fefff2a
# Parent  3f71ce8f8da173a0c1872b0caad586f5cd6ec67f
Fix a read past end of buffer crash in the mp3 probe

diff -r 3f71ce8f8da1 -r 35c8abd32d93 mp3.c
--- a/mp3.c	Tue Jan 20 07:42:14 2009 +0000
+++ b/mp3.c	Tue Jan 20 08:00:39 2009 +0000
@@ -364,7 +364,7 @@
 
     max_frames = 0;
     buf = buf0;
-    end = buf + p->buf_size - sizeof(uint32_t);
+    end = p->buf + p->buf_size - sizeof(uint32_t);
 
     for(; buf < end; buf= buf2+1) {
         buf2 = buf;