ac3dec: split out pointer update loop for saftey

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

diff --git a/libavcodec/ac3dec.c b/libavcodec/ac3dec.c
index ea4a21809fb65e90f1b4adf5698fee2d01913d06..567c79765932eda848066b8b14fd2308d27f017e 100644 (file)
--- a/libavcodec/ac3dec.c
+++ b/libavcodec/ac3dec.c
@@ -1400,8 +1400,9 @@ static int ac3_decode_frame(AVCodecContext * avctx, void *data,
         if (err)
             for (ch = 0; ch < s->out_channels; ch++)
                 memcpy(((float*)s->frame.data[ch]) + AC3_BLOCK_SIZE*blk, output[ch], 1024);
-        for (ch = 0; ch < s->out_channels; ch++) {
+        for (ch = 0; ch < s->out_channels; ch++)
             output[ch] = s->outptr[channel_map[ch]];
+        for (ch = 0; ch < s->out_channels; ch++) {
             if (!ch || channel_map[ch])
                 s->outptr[channel_map[ch]] += AC3_BLOCK_SIZE;
         }