Mercurial > mplayer.hg

diff libmpdemux/demux_realaud.c @ 18505:01b9f29c2fb5

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Fix some potential integer overflow in memory allocation (mot of these were probably safe or disabled anyway)
author rtognimp
date Sun, 14 May 2006 15:51:05 +0000
parents f70772d02eaa
children 530bca1ca585
line wrap: on
line diff
--- a/libmpdemux/demux_realaud.c	Sun May 14 13:39:52 2006 +0000
+++ b/libmpdemux/demux_realaud.c	Sun May 14 15:51:05 2006 +0000
@@ -298,7 +298,7 @@
 		case FOURCC_288:
 			mp_msg(MSGT_DEMUX,MSGL_V,"Audio: 28_8\n");
             sh->wf->nBlockAlign = ra_priv->coded_framesize;
-            ra_priv->audio_buf = malloc(ra_priv->sub_packet_h * ra_priv->frame_size);
+            ra_priv->audio_buf = calloc(ra_priv->sub_packet_h, ra_priv->frame_size);
 			break;
 		case FOURCC_DNET:
 			mp_msg(MSGT_DEMUX,MSGL_V,"Audio: DNET -> AC3\n");
@@ -307,7 +307,7 @@
 			mp_msg(MSGT_DEMUX,MSGL_V,"Audio: SIPR\n");
 			sh->wf->nBlockAlign = ra_priv->coded_framesize;
 			sh->wf->nAvgBytesPerSec = sipr_fl2bps[ra_priv->codec_flavor];
-			ra_priv->audio_buf = malloc(ra_priv->sub_packet_h * ra_priv->frame_size);
+			ra_priv->audio_buf = calloc(ra_priv->sub_packet_h, ra_priv->frame_size);
 			break;
 		default:
 			mp_msg(MSGT_DEMUX,MSGL_V,"Audio: Unknown (%d)\n", sh->format);