Commit b086d4ff authored by Michael Niedermayer's avatar Michael Niedermayer

fix segfault with http://sam.zoy.org/zzuf/lol-ffplay.wmv

Originally committed as revision 7539 to svn://svn.ffmpeg.org/ffmpeg/trunk
parent 0e066acb
......@@ -601,6 +601,10 @@ static int asf_read_packet(AVFormatContext *s, AVPacket *pkt)
assert(asf->packet_replic_size >= 8);
// it should be always at least 8 bytes - FIXME validate
asf->packet_obj_size = get_le32(pb);
if(asf->packet_obj_size >= (1<<24) || asf->packet_obj_size <= 0){
av_log(s, AV_LOG_ERROR, "packet_obj_size invalid\n");
continue;
}
asf->packet_frag_timestamp = get_le32(pb); // timestamp
if (asf->packet_replic_size > 8)
url_fskip(pb, asf->packet_replic_size - 8);
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment