From 9c5104e84ef8adcb6499eac040a6c5af47324e07 Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Mon, 19 Dec 2011 11:47:15 +0100 Subject: dsicin demuxer: Fix excessive malloc() use ffio_limit() Fixes Ticket 790 Bug found by: Oana Stratulat Signed-off-by: Michael Niedermayer --- libavformat/dsicin.c | 3 +++ 1 file changed, 3 insertions(+) (limited to 'libavformat/dsicin.c') diff --git a/libavformat/dsicin.c b/libavformat/dsicin.c index 20b1d02f36..e0db8ba10e 100644 --- a/libavformat/dsicin.c +++ b/libavformat/dsicin.c @@ -27,6 +27,7 @@ #include "libavutil/intreadwrite.h" #include "avformat.h" #include "internal.h" +#include "avio_internal.h" typedef struct CinFileHeader { @@ -179,6 +180,8 @@ static int cin_read_packet(AVFormatContext *s, AVPacket *pkt) /* palette and video packet */ pkt_size = (palette_type + 3) * hdr->pal_colors_count + hdr->video_frame_size; + pkt_size = ffio_limit(pb, pkt_size); + ret = av_new_packet(pkt, 4 + pkt_size); if (ret < 0) return ret; -- cgit v1.2.3