mirror of
https://github.com/FFmpeg/FFmpeg.git
synced 2024-12-23 12:43:46 +02:00
Check data_size in decode_frame_mp3on4().
Originally committed as revision 19987 to svn://svn.ffmpeg.org/ffmpeg/trunk
This commit is contained in:
parent
0d31833d04
commit
f7304e99d4
@ -2466,6 +2466,9 @@ static int decode_frame_mp3on4(AVCodecContext * avctx,
|
||||
OUT_INT *outptr, *bp;
|
||||
int fr, j, n;
|
||||
|
||||
if(*data_size < MPA_FRAME_SIZE * MPA_MAX_CHANNELS * s->frames * sizeof(OUT_INT))
|
||||
return -1;
|
||||
|
||||
*data_size = 0;
|
||||
// Discard too short frames
|
||||
if (buf_size < HEADER_SIZE)
|
||||
|
Loading…
Reference in New Issue
Block a user