diff options
-rw-r--r-- | libavformat/smacker.c | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/libavformat/smacker.c b/libavformat/smacker.c index 7132a85565..b4c1bf4335 100644 --- a/libavformat/smacker.c +++ b/libavformat/smacker.c @@ -306,12 +306,14 @@ static int smacker_read_packet(AVFormatContext *s, AVPacket *pkt) /* if audio chunks are present, put them to stack and retrieve later */ for(i = 0; i < 7; i++) { if(flags & 1) { - unsigned int size; + uint32_t size; uint8_t *tmpbuf; size = avio_rl32(s->pb) - 4; - if(size + 4L > frame_size) + if (!size || size + 4L > frame_size) { + av_log(s, AV_LOG_ERROR, "Invalid audio part size\n"); return AVERROR_INVALIDDATA; + } frame_size -= size; frame_size -= 4; smk->curstream++; |