# HG changeset patch # User michael # Date 1168904873 0 # Node ID e071dbfd4769f21cf08b3b44cfcf06190f1342c4 # Parent 82323178664bf5ab27411554521f391a91373729 fix segfault with http://sam.zoy.org/zzuf/lol-ffplay.wmv diff -r 82323178664b -r e071dbfd4769 asf.c --- a/asf.c Mon Jan 15 22:56:46 2007 +0000 +++ b/asf.c Mon Jan 15 23:47:53 2007 +0000 @@ -601,6 +601,10 @@ assert(asf->packet_replic_size >= 8); // it should be always at least 8 bytes - FIXME validate asf->packet_obj_size = get_le32(pb); + if(asf->packet_obj_size >= (1<<24) || asf->packet_obj_size <= 0){ + av_log(s, AV_LOG_ERROR, "packet_obj_size invalid\n"); + continue; + } asf->packet_frag_timestamp = get_le32(pb); // timestamp if (asf->packet_replic_size > 8) url_fskip(pb, asf->packet_replic_size - 8);