Mercurial > libavcodec.hg
diff aac_parser.c @ 5817:ced30500e2b1 libavcodec
prevent infinite loop and memcpy of negative amounts
fixes issue194
author | michael |
---|---|
date | Sat, 13 Oct 2007 12:25:31 +0000 |
parents | b42e963c8149 |
children | 48759bfbd073 |
line wrap: on
line diff
--- a/aac_parser.c Sat Oct 13 09:58:39 2007 +0000 +++ b/aac_parser.c Sat Oct 13 12:25:31 2007 +0000 @@ -67,6 +67,9 @@ skip_bits1(&bits); /* copyright_identification_bit */ skip_bits1(&bits); /* copyright_identification_start */ size = get_bits(&bits, 13); /* aac_frame_length */ + if(size < AAC_HEADER_SIZE) + return 0; + skip_bits(&bits, 11); /* adts_buffer_fullness */ rdb = get_bits(&bits, 2); /* number_of_raw_data_blocks_in_frame */