vlc_b64_decode_binary_to_buffer(): i_dst is the size of the destination buffer, not...

diff --git a/src/text/strings.c b/src/text/strings.c
index 8fd825ac6faab150f6de2304f930e281973b64bc..9e0dc454367aa4af6a1dcbf729c7230fe27565f1 100644 (file)
--- a/src/text/strings.c
+++ b/src/text/strings.c
@@ -555,7 +555,7 @@ size_t vlc_b64_decode_binary_to_buffer( uint8_t *p_dst, size_t i_dst, const char
     int i_level;
     int i_last;
 
-    for( i_level = 0, i_last = 0; i_dst > 0 && *p != '\0'; i_dst--, p++ )
+    for( i_level = 0, i_last = 0; (size_t)( p_dst - p_start ) < i_dst && *p != '\0'; p++ )
     {
         const int c = b64[(unsigned int)*p];
         if( c == -1 )