From a63a86fd6f2a59d99f185e6c75b13d66b7acadab Mon Sep 17 00:00:00 2001 From: Oana Stratulat Date: Wed, 11 Jan 2012 00:01:09 +0200 Subject: [PATCH] Fixes issue 890: OOM with zmbv file Signed-off-by: Michael Niedermayer --- libavformat/avidec.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/libavformat/avidec.c b/libavformat/avidec.c index 6112af42e1..c8932541c8 100644 --- a/libavformat/avidec.c +++ b/libavformat/avidec.c @@ -544,6 +544,10 @@ static int avi_read_header(AVFormatContext *s, AVFormatParameters *ap) st->start_time = 0; avio_rl32(pb); /* buffer size */ avio_rl32(pb); /* quality */ + if (ast->cum_len*ast->scale/ast->rate > 3600) { + av_log(s, AV_LOG_ERROR, "crazy start time, iam scared, giving up\n"); + return AVERROR_INVALIDDATA; + } ast->sample_size = avio_rl32(pb); /* sample ssize */ ast->cum_len *= FFMAX(1, ast->sample_size); // av_log(s, AV_LOG_DEBUG, "%d %d %d %d\n", ast->rate, ast->scale, ast->start, ast->sample_size);