diff --git a/libavformat/mxfdec.c b/libavformat/mxfdec.c index 37e1cfa4469877544573c69a9e61ee1ee6b6c18e..3299e16528c1f47f9b6c0567dad7933896b32769 100644 --- a/libavformat/mxfdec.c +++ b/libavformat/mxfdec.c @@ -312,7 +312,7 @@ static int mxf_get_d10_aes3_packet(AVIOContext *pb, AVStream *st, AVPacket *pkt, data_ptr = pkt->data; end_ptr = pkt->data + length; buf_ptr = pkt->data + 4; /* skip SMPTE 331M header */ - for (; buf_ptr + st->codec->channels*4 < end_ptr; ) { + for (; end_ptr - buf_ptr >= st->codec->channels * 4; ) { for (i = 0; i < st->codec->channels; i++) { uint32_t sample = bytestream_get_le32(&buf_ptr); if (st->codec->bits_per_coded_sample == 24)