# HG changeset patch # User bcoudurier # Date 1211773990 0 # Node ID 5be8d622e4585a3b27ec588b30b932d85ad32a96 # Parent b643008b9dcfbd6f9d7d0a28b9a3f4b9c7fd6042 return error if len is negative, prevent segfault diff -r b643008b9dcf -r 5be8d622e458 ffmdec.c --- a/ffmdec.c Mon May 26 03:52:14 2008 +0000 +++ b/ffmdec.c Mon May 26 03:53:10 2008 +0000 @@ -89,6 +89,8 @@ while (size > 0) { redo: len = ffm->packet_end - ffm->packet_ptr; + if (len < 0) + return -1; if (len > size) len = size; if (len == 0) {