From 1cce7def0a8eff2e7db294b7d195a0fb1a5043b0 Mon Sep 17 00:00:00 2001 From: Laurent Aimar Date: Sat, 1 Oct 2011 00:44:54 +0200 Subject: Check for corrupted data in avs demuxer. Signed-off-by: Michael Niedermayer --- libavformat/avs.c | 2 ++ 1 file changed, 2 insertions(+) (limited to 'libavformat/avs.c') diff --git a/libavformat/avs.c b/libavformat/avs.c index 89b2642c36..7b90f85153 100644 --- a/libavformat/avs.c +++ b/libavformat/avs.c @@ -163,6 +163,8 @@ static int avs_read_packet(AVFormatContext * s, AVPacket * pkt) sub_type = avio_r8(s->pb); type = avio_r8(s->pb); size = avio_rl16(s->pb); + if (size < 4) + return AVERROR_INVALIDDATA; avs->remaining_frame_size -= size; switch (type) { -- cgit v1.2.3