Commit 0d31833d authored by Michael Niedermayer's avatar Michael Niedermayer
Browse files

check data_size in decode_frame()

Originally committed as revision 19986 to svn://svn.ffmpeg.org/ffmpeg/trunk
parent 6a0d5493
......@@ -2276,6 +2276,9 @@ static int decode_frame(AVCodecContext * avctx,
avctx->bit_rate = s->bit_rate;
avctx->sub_id = s->layer;
if(*data_size < 1152*avctx->channels*sizeof(OUT_INT))
return -1;
if(s->frame_size<=0 || s->frame_size > buf_size){
av_log(avctx, AV_LOG_ERROR, "incomplete frame\n");
return -1;
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment