diff libmpdemux/ebml.c @ 18558:4928dd61f136

Fix potential integer overflows in memory allocation. Patch by Rich and me
author rtogni
date Sun, 04 Jun 2006 22:41:27 +0000
parents e3379df74bcd
children 8fb542b97815
line wrap: on
line diff
--- a/libmpdemux/ebml.c	Fri Jun 02 11:31:42 2006 +0000
+++ b/libmpdemux/ebml.c	Sun Jun 04 22:41:27 2006 +0000
@@ -221,6 +221,8 @@
   len = ebml_read_length (s, &l);
   if (len == EBML_UINT_INVALID)
     return NULL;
+  if (len > SIZE_MAX - 1)
+    return NULL;
   if (length)
     *length = len + l;