# HG changeset patch # User conrad # Date 1274217692 0 # Node ID 9565f0ce6f2eee5c467f2e6eca41b5833fe8d733 # Parent ce535a7152ef715a7ddb5a45df3481ee9f444f51 matroskadec: Fix buffer overread in matroska_ebmlnum_uint Based on a Chromium patch diff -r ce535a7152ef -r 9565f0ce6f2e matroskadec.c --- a/matroskadec.c Tue May 18 21:21:28 2010 +0000 +++ b/matroskadec.c Tue May 18 21:21:32 2010 +0000 @@ -679,7 +679,7 @@ { ByteIOContext pb; init_put_byte(&pb, data, size, 0, NULL, NULL, NULL, NULL); - return ebml_read_num(matroska, &pb, 8, num); + return ebml_read_num(matroska, &pb, FFMIN(size, 8), num); } /*