Mercurial > libavformat.hg

diff mxfdec.c @ 4761:a079bfd0192b libavformat

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
protect realloc overflow
author bcoudurier
date Sat, 21 Mar 2009 00:50:51 +0000
parents 7cf3b77ad6ff
children 9bc9feb36557
line wrap: on
line diff
--- a/mxfdec.c	Sat Mar 21 00:49:14 2009 +0000
+++ b/mxfdec.c	Sat Mar 21 00:50:51 2009 +0000
@@ -364,6 +364,8 @@
 
 static int mxf_add_metadata_set(MXFContext *mxf, void *metadata_set)
 {
+    if (mxf->metadata_sets_count+1 >= UINT_MAX / sizeof(*mxf->metadata_sets))
+        return AVERROR(ENOMEM);
     mxf->metadata_sets = av_realloc(mxf->metadata_sets, (mxf->metadata_sets_count + 1) * sizeof(*mxf->metadata_sets));
     if (!mxf->metadata_sets)
         return -1;