# HG changeset patch
# User bcoudurier
# Date 1283977224 0
# Node ID bae1afdd961ac234dc10eb83fddd5ad07c409317
# Parent  35bb7cdfe337f28cde6ef160ce86c3728ad51cf9
Check dref size based on a patch by google

diff -r 35bb7cdfe337 -r bae1afdd961a mov.c
--- a/mov.c	Wed Sep 08 20:18:14 2010 +0000
+++ b/mov.c	Wed Sep 08 20:20:24 2010 +0000
@@ -345,6 +345,9 @@
         uint32_t size = get_be32(pb);
         int64_t next = url_ftell(pb) + size - 4;
 
+        if (size < 12)
+            return -1;
+
         dref->type = get_le32(pb);
         get_be32(pb); // version + flags
         dprintf(c->fc, "type %.4s size %d\n", (char*)&dref->type, size);