diff aac_parser.c @ 5817:ced30500e2b1 libavcodec

prevent infinite loop and memcpy of negative amounts fixes issue194
author michael
date Sat, 13 Oct 2007 12:25:31 +0000
parents b42e963c8149
children 48759bfbd073
line wrap: on
line diff
--- a/aac_parser.c	Sat Oct 13 09:58:39 2007 +0000
+++ b/aac_parser.c	Sat Oct 13 12:25:31 2007 +0000
@@ -67,6 +67,9 @@
     skip_bits1(&bits);          /* copyright_identification_bit */
     skip_bits1(&bits);          /* copyright_identification_start */
     size = get_bits(&bits, 13); /* aac_frame_length */
+    if(size < AAC_HEADER_SIZE)
+        return 0;
+
     skip_bits(&bits, 11);       /* adts_buffer_fullness */
     rdb = get_bits(&bits, 2);   /* number_of_raw_data_blocks_in_frame */