riff: Validate the wav header size before trying to parse it

1b4c4684 · Luca Barbato · 5bdfc171 · 1b4c4684
Commit 1b4c4684 authored Jun 28, 2015 by Luca Barbato
Hide whitespace changes
Inline Side-by-side

Showing with 3 additions and 0 deletions

riffdec.c libavformat/riffdec.c +3 -0

No files found.
--- a/libavformat/riffdec.c
+++ b/libavformat/riffdec.c
@@ -79,6 +79,9 @@ int ff_get_wav_header(AVIOContext *pb, AVCodecContext *codec, int size)
 {
    int id;

+    if (size < 14)
+        return AVERROR_INVALIDDATA;
+
    id                 = avio_rl16(pb);
    codec->codec_type  = AVMEDIA_TYPE_AUDIO;
    codec->channels    = avio_rl16(pb);