# HG changeset patch
# User bcoudurier
# Date 1237596651 0
# Node ID a079bfd0192b4312c621cf57bb8e10926535246f
# Parent  9a8c5a8c64ea9b4b41323ce2df2b320e6bce8eef
protect realloc overflow

diff -r 9a8c5a8c64ea -r a079bfd0192b mxfdec.c
--- a/mxfdec.c	Sat Mar 21 00:49:14 2009 +0000
+++ b/mxfdec.c	Sat Mar 21 00:50:51 2009 +0000
@@ -364,6 +364,8 @@
 
 static int mxf_add_metadata_set(MXFContext *mxf, void *metadata_set)
 {
+    if (mxf->metadata_sets_count+1 >= UINT_MAX / sizeof(*mxf->metadata_sets))
+        return AVERROR(ENOMEM);
     mxf->metadata_sets = av_realloc(mxf->metadata_sets, (mxf->metadata_sets_count + 1) * sizeof(*mxf->metadata_sets));
     if (!mxf->metadata_sets)
         return -1;