From cec628a414b8c7ce0a904a579ecd79defbdcb2df Mon Sep 17 00:00:00 2001
From: Trond Andersen <trondand@cisco.com>
Date: Fri, 11 Mar 2011 10:41:11 +0100
Subject: [PATCH] rtcpbuffer: fix invalid read in validation of padding in rtcp
 packet

---
 gst-libs/gst/rtp/gstrtcpbuffer.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/gst-libs/gst/rtp/gstrtcpbuffer.c b/gst-libs/gst/rtp/gstrtcpbuffer.c
index 096f79ec36..bdaf89bfcc 100644
--- a/gst-libs/gst/rtp/gstrtcpbuffer.c
+++ b/gst-libs/gst/rtp/gstrtcpbuffer.c
@@ -163,7 +163,7 @@ gst_rtcp_buffer_validate_data (guint8 * data, guint len)
       goto wrong_length;
 
     /* get padding */
-    pad_bytes = data[len - 1];
+    pad_bytes = data[data_len - 1];
     if (data_len != pad_bytes)
       goto wrong_padding;
   }