From 57bb47f3f79b9814e77b1da0f84cf50b7f1c1732 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= Date: Mon, 28 Nov 2016 20:05:02 +0200 Subject: [PATCH] mpegtssection: Fix off-by-one in PMT parsing --- gst-libs/gst/mpegts/gstmpegtssection.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gst-libs/gst/mpegts/gstmpegtssection.c b/gst-libs/gst/mpegts/gstmpegtssection.c index 02038a76a0..5222024f4f 100644 --- a/gst-libs/gst/mpegts/gstmpegtssection.c +++ b/gst-libs/gst/mpegts/gstmpegtssection.c @@ -716,7 +716,7 @@ _parse_pmt (GstMpegtsSection * section) } /* Section length was longer than the actual content of the PMT */ - if (data <= end - 4) + if (data < end - 4) goto error; /* Ensure we did not read after the end of our array */