Check for corrupted data in avs demuxer.

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Check for corrupted data in avs demuxer.
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
1cce7def · Laurent Aimar · Michael Niedermayer · 834b3760 · 1cce7def
Commit 1cce7def authored Sep 30, 2011 by Laurent Aimar Committed by Michael Niedermayer Oct 01, 2011
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 0 deletions

avs.c libavformat/avs.c +2 -0

No files found.
--- a/libavformat/avs.c
+++ b/libavformat/avs.c
@@ -163,6 +163,8 @@ static int avs_read_packet(AVFormatContext * s, AVPacket * pkt)
            sub_type = avio_r8(s->pb);
            type = avio_r8(s->pb);
            size = avio_rl16(s->pb);
+            if (size < 4)
+                return AVERROR_INVALIDDATA;
            avs->remaining_frame_size -= size;

            switch (type) {