lavc/alac: Avoid allocating huge memory blocks for malicious alac input.

3357b68b · Carl Eugen Hoyos · 8f6c398d · 3357b68b
Commit 3357b68b authored Nov 01, 2017 by Carl Eugen Hoyos
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

alac.c libavcodec/alac.c +1 -1

No files found.
--- a/libavcodec/alac.c
+++ b/libavcodec/alac.c
@@ -524,7 +524,7 @@ static int alac_set_info(ALACContext *alac)

    alac->max_samples_per_frame = bytestream2_get_be32u(&gb);
    if (!alac->max_samples_per_frame ||
-        alac->max_samples_per_frame > INT_MAX / sizeof(int32_t)) {
+        alac->max_samples_per_frame > 4096 * 4096) {
        av_log(alac->avctx, AV_LOG_ERROR,
               "max samples per frame invalid: %"PRIu32"\n",
               alac->max_samples_per_frame);