Commit f7739f37 authored by Michael Niedermayer's avatar Michael Niedermayer
Browse files

Output buffer overflow.

Originally committed as revision 13052 to svn://svn.ffmpeg.org/ffmpeg/trunk
parent 494e3531
......@@ -465,6 +465,11 @@ static int alac_decode_frame(AVCodecContext *avctx,
} else
outputsamples = alac->setinfo_max_samples_per_frame;
if(outputsamples > *outputsize / alac->bytespersample){
av_log(avctx, AV_LOG_ERROR, "sample buffer too small\n");
return -1;
}
*outputsize = outputsamples * alac->bytespersample;
readsamplesize = alac->setinfo_sample_size - (wasted_bytes * 8) + channels - 1;
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment