From dbb7cbf26ed44d258c56e976de3300d87b716875 Mon Sep 17 00:00:00 2001
From: Baptiste Coudurier <baptiste.coudurier@gmail.com>
Date: Wed, 27 Feb 2008 09:30:05 +0000
Subject: [PATCH] fix possible overflow with memmove

Originally committed as revision 12261 to svn://svn.ffmpeg.org/ffmpeg/trunk
---
 libavformat/mov.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libavformat/mov.c b/libavformat/mov.c
index 71ddc6ab26..75746bd410 100644
--- a/libavformat/mov.c
+++ b/libavformat/mov.c
@@ -256,7 +256,7 @@ static int mov_read_dref(MOVContext *c, ByteIOContext *pb, MOV_atom_t atom)
                 if (type == 2) { // absolute path
                     dref->path = av_mallocz(len+1);
                     get_buffer(pb, dref->path, len);
-                    if (!strncmp(dref->path, volume, volume_len)) {
+                    if (len > volume_len && !strncmp(dref->path, volume, volume_len)) {
                         len -= volume_len;
                         memmove(dref->path, dref->path+volume_len, len);
                         dref->path[len] = 0;