changeset 3354:5be8d622e458 libavformat

return error if len is negative, prevent segfault
author bcoudurier
date Mon, 26 May 2008 03:53:10 +0000
parents b643008b9dcf
children fa366fc51861
files ffmdec.c
diffstat 1 files changed, 2 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- a/ffmdec.c	Mon May 26 03:52:14 2008 +0000
+++ b/ffmdec.c	Mon May 26 03:53:10 2008 +0000
@@ -89,6 +89,8 @@
     while (size > 0) {
     redo:
         len = ffm->packet_end - ffm->packet_ptr;
+        if (len < 0)
+            return -1;
         if (len > size)
             len = size;
         if (len == 0) {