missing " && j<syncpoint_count" protection in the index parsing, as the

spec instructs...

git-svn-id: file:///var/local/repositories/ffmpeg/trunk@11852 9553f0bf-9b14-0410-a0b8-cfaf0461ba5b

diff --git a/libavformat/nutdec.c b/libavformat/nutdec.c
index 10f01980921112d6ed9a609d98ff9691c98cdc9f..9ecf3d4a97c186b0fe85b05601c3f9f70b6dc2a5 100644 (file)
--- a/libavformat/nutdec.c
+++ b/libavformat/nutdec.c
@@ -501,7 +501,7 @@ static int find_and_decode_index(NUTContext *nut){
                 return -1;
             }
             assert(n<=syncpoint_count+1);
-            for(; j<n; j++){
+            for(; j<n && j<syncpoint_count; j++){
                 if(has_keyframe[j]){
                     uint64_t B, A= ff_get_v(bc);
                     if(!A){