From fd06291239c1bb616bf303b5696cc432710b2530 Mon Sep 17 00:00:00 2001 From: Luca Barbato Date: Wed, 22 May 2013 12:51:42 +0200 Subject: wavpack: check packet size early Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org --- libavcodec/wavpack.c | 3 +++ 1 file changed, 3 insertions(+) (limited to 'libavcodec/wavpack.c') diff --git a/libavcodec/wavpack.c b/libavcodec/wavpack.c index cfcd22d9f6..e6e9872491 100644 --- a/libavcodec/wavpack.c +++ b/libavcodec/wavpack.c @@ -1203,6 +1203,9 @@ static int wavpack_decode_frame(AVCodecContext *avctx, void *data, int frame_size, ret, frame_flags; int samplecount = 0; + if (avpkt->size < 12 + s->multichannel * 4) + return AVERROR_INVALIDDATA; + s->block = 0; s->ch_offset = 0; -- cgit v1.2.3