• Ronald S. Bultje's avatar
    mp3on4: require a minimum framesize. · 3e13005c
    Ronald S. Bultje authored
    If bufsize < headersize, init_get_bits() will be called with a negative
    number, causing it to fail and any subsequent call to get_bits() will
    crash because it reads from a NULL pointer.
    
    Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
    CC: libav-stable@libav.org
    3e13005c
mpegaudiodec.c 66.7 KB