From 5110d151b6b2b835ebcdbe44f7a445b6c23eca62 Mon Sep 17 00:00:00 2001
From: Michael Niedermayer <michaelni@gmx.at>
Date: Mon, 3 Dec 2007 04:49:01 +0000
Subject: prevent O(n^2) execution of ff_mpa_decode_header() for valid mp3
 files

Originally committed as revision 11144 to svn://svn.ffmpeg.org/ffmpeg/trunk
---
 libavformat/mp3.c | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'libavformat/mp3.c')

diff --git a/libavformat/mp3.c b/libavformat/mp3.c
index 4ad9b67d5b..74bd275077 100644
--- a/libavformat/mp3.c
+++ b/libavformat/mp3.c
@@ -418,6 +418,8 @@ static int mp3_read_probe(AVProbeData *p)
         max_frames = FFMAX(max_frames, frames);
         if(buf == p->buf)
             first_frames= frames;
+        if(buf2 > end)
+            break;
     }
     if   (first_frames>=3) return AVPROBE_SCORE_MAX/2+1;
     else if(max_frames>=3) return AVPROBE_SCORE_MAX/4;
-- 
cgit v1.2.3