Commit c30f53e4 authored by Michael Niedermayer's avatar Michael Niedermayer

matroskadec: prevent potential integer overflow

Iam not sure this can happen, but its safer we check.
Signed-off-by: 's avatarMichael Niedermayer <michaelni@gmx.at>
parent bc3b4220
......@@ -1580,7 +1580,7 @@ static int matroska_read_header(AVFormatContext *s)
&& (track->codec_priv.data != NULL)) {
fourcc = AV_RL32(track->codec_priv.data);
codec_id = ff_codec_get_id(ff_codec_movvideo_tags, fourcc);
} else if (codec_id == CODEC_ID_ALAC && track->codec_priv.size) {
} else if (codec_id == CODEC_ID_ALAC && track->codec_priv.size && track->codec_priv.size < INT_MAX-12) {
/* Only ALAC's magic cookie is stored in Matroska's track headers.
Create the "atom size", "tag", and "tag version" fields the
decoder expects manually. */
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment