# HG changeset patch
# User eugeni
# Date 1157226686 0
# Node ID 84bf8bd9f9da52333dc755bd7d4d06d02edb9292
# Parent  521f71200591c3d2636e235a9ebda3d44c514f36
Fix read beyond the end of allocated memory block.

diff -r 521f71200591 -r 84bf8bd9f9da libmpdemux/demux_mkv.c
--- a/libmpdemux/demux_mkv.c	Sat Sep 02 19:39:24 2006 +0000
+++ b/libmpdemux/demux_mkv.c	Sat Sep 02 19:51:26 2006 +0000
@@ -2878,7 +2878,7 @@
           ptr1++;
       
           /* Newline */
-          while (*ptr1 == '\\' && ptr1+1-block < size && (*(ptr1+1)|0x20) == 'n')
+          while (ptr1+1-block < size && *ptr1 == '\\' && (*(ptr1+1)|0x20) == 'n')
             {
               mkv_d->clear_subs_at[mkv_d->subs.lines++]
                 = timecode + block_duration;