Commit 8cc72ce5 authored by Justin Ruggles's avatar Justin Ruggles

twinvq: validate that channels is not <= 0

This could occur due to integer overflow when reading the channel count from
the extradata.
parent cebea00c
...@@ -1126,7 +1126,7 @@ static av_cold int twin_decode_init(AVCodecContext *avctx) ...@@ -1126,7 +1126,7 @@ static av_cold int twin_decode_init(AVCodecContext *avctx)
default: avctx->sample_rate = isampf * 1000; break; default: avctx->sample_rate = isampf * 1000; break;
} }
if (avctx->channels > CHANNELS_MAX) { if (avctx->channels <= 0 || avctx->channels > CHANNELS_MAX) {
av_log(avctx, AV_LOG_ERROR, "Unsupported number of channels: %i\n", av_log(avctx, AV_LOG_ERROR, "Unsupported number of channels: %i\n",
avctx->channels); avctx->channels);
return -1; return -1;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment