diff options
Diffstat (limited to 'libavformat/redspark.c')
| -rw-r--r-- | libavformat/redspark.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/libavformat/redspark.c b/libavformat/redspark.c index 44d5da77fb..3963261b9a 100644 --- a/libavformat/redspark.c +++ b/libavformat/redspark.c @@ -108,6 +108,11 @@ static int redspark_read_header(AVFormatContext *s) if (bytestream2_get_byteu(&gbc)) // Loop flag coef_off += 16; + if (coef_off + codec->channels * (32 + 14) > HEADER_SIZE) { + ret = AVERROR_INVALIDDATA; + goto fail; + } + codec->extradata_size = 32 * codec->channels; codec->extradata = av_malloc(codec->extradata_size); if (!codec->extradata) { |