changeset 4883:9055ed00a295 libavcodec

fix exploitable buffer overflow
author michael
date Fri, 27 Apr 2007 12:41:55 +0000
parents 8131ccb4ea72
children b23051d2a676
files dca.c
diffstat 1 files changed, 3 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- a/dca.c	Fri Apr 27 09:32:31 2007 +0000
+++ b/dca.c	Fri Apr 27 12:41:55 2007 +0000
@@ -1089,6 +1089,9 @@
     uint16_t *ssrc = (uint16_t *) src, *sdst = (uint16_t *) dst;
     PutBitContext pb;
 
+    if((unsigned)src_size > (unsigned)max_size)
+        return -1;
+
     mrk = AV_RB32(src);
     switch (mrk) {
     case DCA_MARKER_RAW_BE: