# HG changeset patch
# User reimar
# Date 1168686400 0
# Node ID a10888bc9758dfd932cf00c86bb7c663ec07db65
# Parent  4e22e06485c60abb186be64d4bfcac969ccce4b1
Fix invalid read for gifs with a palette for less than 256 colors

diff -r 4e22e06485c6 -r a10888bc9758 libmpdemux/demux_gif.c
--- a/libmpdemux/demux_gif.c	Sat Jan 13 11:05:32 2007 +0000
+++ b/libmpdemux/demux_gif.c	Sat Jan 13 11:06:40 2007 +0000
@@ -119,9 +119,11 @@
 
   {
     int y;
+    int cnt = effective_map->ColorCount;
+    if (cnt > 256) cnt = 256;
 
     // copy the palette
-    for (y = 0; y < 256; y++) {
+    for (y = 0; y < cnt; y++) {
 	priv->palette[(y * 4) + 0] = effective_map->Colors[y].Blue;
 	priv->palette[(y * 4) + 1] = effective_map->Colors[y].Green;
 	priv->palette[(y * 4) + 2] = effective_map->Colors[y].Red;