From 5208d030b3354101c5c0a49a0758c9782f0da116 Mon Sep 17 00:00:00 2001
From: Zaheer Abbas Merali <zaheerabbas@merali.org>
Date: Mon, 17 May 2010 16:26:03 +0100
Subject: [PATCH] mpegtsdemux: fix memory corruption when parsing adaptation
 field

---
 gst/mpegdemux/gstmpegtsdemux.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/gst/mpegdemux/gstmpegtsdemux.c b/gst/mpegdemux/gstmpegtsdemux.c
index 1aa86efb43..1c747c3671 100644
--- a/gst/mpegdemux/gstmpegtsdemux.c
+++ b/gst/mpegdemux/gstmpegtsdemux.c
@@ -1782,7 +1782,7 @@ gst_mpegts_demux_parse_adaptation_field (GstMpegTSStream * stream,
                     pmt_stream = demux->streams[demux->streams[j]->PMT_pid];
                     GST_DEBUG_OBJECT (demux, "Updating base_time on all es "
                         "pids belonging to PMT 0x%02x", stream->PMT_pid);
-                    for (i = 0; i <= pmt_stream->PMT.entries->len; i++) {
+                    for (i = 0; i < pmt_stream->PMT.entries->len; i++) {
                       GstMpegTSPMTEntry *cur_entry =
                           &g_array_index (pmt_stream->PMT.entries,
                           GstMpegTSPMTEntry, i);