summaryrefslogtreecommitdiff
path: root/libavcodec/aacdec.c
diff options
context:
space:
mode:
authorAndreas Cadhalpun <andreas.cadhalpun@googlemail.com>2015-05-12 20:27:21 +0200
committerMichael Niedermayer <michaelni@gmx.at>2015-05-12 21:19:35 +0200
commitec38a1ba404b8cb8d71ccee2b8dcd6f3fcbde273 (patch)
tree3de4c6aa7838c242f2aec77799d5f6da583a2dbf /libavcodec/aacdec.c
parentd3c9f1fdbe055acdd6b47b85bfd04aaed2da8016 (diff)
aacdec: don't return frames without data
Since commit 676a395a aac->frame->data is not necessarily allocated at the end of aac_decode_frame_int if avctx->channels is 0. In this case a bogus frame without any data, but non-zero nb_samples is returned. Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com> Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
Diffstat (limited to 'libavcodec/aacdec.c')
-rw-r--r--libavcodec/aacdec.c6
1 files changed, 6 insertions, 0 deletions
diff --git a/libavcodec/aacdec.c b/libavcodec/aacdec.c
index d55df43a5e..a405fafd7e 100644
--- a/libavcodec/aacdec.c
+++ b/libavcodec/aacdec.c
@@ -3073,6 +3073,12 @@ static int aac_decode_frame_int(AVCodecContext *avctx, void *data,
AV_WL32(side, 2*AV_RL32(side));
}
+ if (!ac->frame->data[0] && samples) {
+ av_log(avctx, AV_LOG_ERROR, "no frame data found\n");
+ err = AVERROR_INVALIDDATA;
+ goto fail;
+ }
+
*got_frame_ptr = !!samples;
if (samples) {
ac->frame->nb_samples = samples;