# HG changeset patch # User kostya # Date 1190452187 0 # Node ID 914ff70e136743be4ec68a8be79378ba294af68a # Parent 6b8daf48b82fdb8206ceac2a2ca4e72010b406b8 Do not decode more data than output buffer may hold diff -r 6b8daf48b82f -r 914ff70e1367 dsicinav.c --- a/dsicinav.c Fri Sep 21 18:23:46 2007 +0000 +++ b/dsicinav.c Sat Sep 22 09:09:47 2007 +0000 @@ -317,6 +317,8 @@ uint8_t *src = buf; int16_t *samples = (int16_t *)data; + buf_size = FFMIN(buf_size, *data_size/2); + if (cin->initial_decode_frame) { cin->initial_decode_frame = 0; cin->delta = (int16_t)AV_RL16(src); src += 2;