Index: media/libnestegg/patches/0001-clamp-nestegg-uint-reads.patch
===================================================================
--- media/libnestegg/patches/0001-clamp-nestegg-uint-reads.patch
+++ media/libnestegg/patches/0001-clamp-nestegg-uint-reads.patch
@@ -4,15 +4,13 @@
 enforced in ne_read_uint.
 
 diff --git a/src/nestegg.c b/src/nestegg.c
 --- a/src/nestegg.c
 +++ b/src/nestegg.c
-@@ -1026,7 +1026,8 @@ ne_read_uint(ne_io * io, uint64_t * val, uint64_t length)
+@@ -1026,6 +1026,7 @@ ne_read_uint(ne_io * io, uint64_t * val, uint64_t length)
    unsigned char b;
    int r;
 
--  if (length == 0 || length > 8)
 +  /* Mozilla: EBML unsigned integers are 1..8 bytes wide (RFC 8794 s7.1). */
-+  if (length == 0 || length > 8)
+   if (length > 8)
      return -1;
-   r = ne_io_read(io, &b, 1);
-   if (r != 1)
+