# HG changeset patch # User benoit # Date 1233079240 0 # Node ID 0e275ee372178ff5201162bba474e53d728f5569 # Parent f49e5d92ab267885b15e9d987a5e96ca89516456 Check buffer is inside what is passed when probing for flac. diff -r f49e5d92ab26 -r 0e275ee37217 raw.c --- a/raw.c Tue Jan 27 12:23:16 2009 +0000 +++ b/raw.c Tue Jan 27 18:00:40 2009 +0000 @@ -586,11 +586,12 @@ static int flac_probe(AVProbeData *p) { uint8_t *bufptr = p->buf; + uint8_t *end = p->buf + p->buf_size; if(ff_id3v2_match(bufptr)) bufptr += ff_id3v2_tag_len(bufptr); - if(memcmp(bufptr, "fLaC", 4)) return 0; + if(bufptr > end-4 || memcmp(bufptr, "fLaC", 4)) return 0; else return AVPROBE_SCORE_MAX / 2; } #endif