Message ID | 20190924114745.30362-2-michael@niedermayer.cc |
---|---|
State | Accepted |
Commit | dd9e6d077ea3259cc6c1896334bbbc7f948979b7 |
Headers | show |
diff --git a/libavcodec/dxv.c b/libavcodec/dxv.c index 3fb50e96d0..1486de7341 100644 --- a/libavcodec/dxv.c +++ b/libavcodec/dxv.c @@ -783,7 +783,7 @@ static int dxv_decompress_cocg(DXVContext *ctx, GetByteContext *gb, return ret; } - bytestream2_seek(gb, data_start + op_offset + skip0 + skip1 - 12, SEEK_SET); + bytestream2_seek(gb, data_start - 12 + op_offset + skip0 + skip1, SEEK_SET); return 0; }
the data_start is after reading 12 bytes and if its subtracted at the very end the intermediate might overflow Signed-off-by: Michael Niedermayer <michael@niedermayer.cc> --- libavcodec/dxv.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)