On Wed, Oct 26, 2011 at 12:16:21PM -0400, Justin Ruggles wrote: > --- > libavcodec/mpegaudiodec.c | 3 +++ > 1 files changed, 3 insertions(+), 0 deletions(-) > > diff --git a/libavcodec/mpegaudiodec.c b/libavcodec/mpegaudiodec.c > index 60356bd..d247b66 100644 > --- a/libavcodec/mpegaudiodec.c > +++ b/libavcodec/mpegaudiodec.c > @@ -1873,6 +1873,9 @@ static int decode_frame_adu(AVCodecContext * avctx, > void *data, int *data_size, > avctx->bit_rate = s->bit_rate; > avctx->sub_id = s->layer; > > + if (*data_size < 1152 * avctx->channels * sizeof(OUT_INT)) > + return AVERROR(EINVAL); > + > s->frame_size = len; > > #if FF_API_PARSE_FRAME > --
looks reasonable _______________________________________________ libav-devel mailing list [email protected] https://lists.libav.org/mailman/listinfo/libav-devel
