mirror of
https://github.com/FFmpeg/FFmpeg.git
synced 2025-01-13 21:28:01 +02:00
smacker: sanity check audio size.
Fixes, excessive memory allocation Fixes Ticket1892 Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
parent
014058abea
commit
57c0da6fe4
@ -608,6 +608,11 @@ static int smka_decode_frame(AVCodecContext *avctx, void *data,
|
|||||||
|
|
||||||
unp_size = AV_RL32(buf);
|
unp_size = AV_RL32(buf);
|
||||||
|
|
||||||
|
if (unp_size > (1U<<24)) {
|
||||||
|
av_log(avctx, AV_LOG_ERROR, "packet is too big\n");
|
||||||
|
return AVERROR_INVALIDDATA;
|
||||||
|
}
|
||||||
|
|
||||||
init_get_bits(&gb, buf + 4, (buf_size - 4) * 8);
|
init_get_bits(&gb, buf + 4, (buf_size - 4) * 8);
|
||||||
|
|
||||||
if(!get_bits1(&gb)){
|
if(!get_bits1(&gb)){
|
||||||
|
Loading…
Reference in New Issue
Block a user