# HG changeset patch
# User michael
# Date 1253705378 0
# Node ID ccd7a1882c9232431818e143e116a8a9e8270d83
# Parent  77246a6cffa048929ef01ce25b911eb9d8665dc7
check data_size in decode_frame()

diff -r 77246a6cffa0 -r ccd7a1882c92 mpegaudiodec.c
--- a/mpegaudiodec.c	Wed Sep 23 10:45:14 2009 +0000
+++ b/mpegaudiodec.c	Wed Sep 23 11:29:38 2009 +0000
@@ -2276,6 +2276,9 @@
     avctx->bit_rate = s->bit_rate;
     avctx->sub_id = s->layer;
 
+    if(*data_size < 1152*avctx->channels*sizeof(OUT_INT))
+        return -1;
+
     if(s->frame_size<=0 || s->frame_size > buf_size){
         av_log(avctx, AV_LOG_ERROR, "incomplete frame\n");
         return -1;