summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--libavcodec/fraps.c5
1 files changed, 5 insertions, 0 deletions
diff --git a/libavcodec/fraps.c b/libavcodec/fraps.c
index a1d5a17777..bdbe511d8d 100644
--- a/libavcodec/fraps.c
+++ b/libavcodec/fraps.c
@@ -143,6 +143,11 @@ static int decode_frame(AVCodecContext *avctx,
const int planes = 3;
uint8_t *out;
+ if (buf_size < 4) {
+ av_log(avctx, AV_LOG_ERROR, "Packet is too short\n");
+ return AVERROR_INVALIDDATA;
+ }
+
header = AV_RL32(buf);
version = header & 0xff;
header_size = (header & (1<<30))? 8 : 4; /* bit 30 means pad to 8 bytes */