avformat/sdp: Fix potential write beyond end of buffer

[ffmpeg] / libavcodec / speedhq.c

diff --git a/libavcodec/speedhq.c b/libavcodec/speedhq.c
index 890b8253cd687bf3c991e6076e1626957d336e78..b834b79f28098fe9f53587ae79bebe05d92e2bea 100644 (file)
--- a/libavcodec/speedhq.c
+++ b/libavcodec/speedhq.c
@@ -447,7 +447,7 @@ static int speedhq_decode_frame(AVCodecContext *avctx,
     }
     frame->key_frame = 1;
 
-    if (second_field_offset == 4) {
+    if (second_field_offset == 4 || second_field_offset == (buf_size-4)) {
         /*
          * Overlapping first and second fields is used to signal
          * encoding only a single field. In this case, "height"