# HG changeset patch
# User reimar
# Date 1215186451 0
# Node ID 045b7646abb21e8a43d82687d239534f43d943ae
# Parent  b4094f8dccf0cde39d17d9b5ef7dc685821c60e5
Check stdata_len before accessing stdata. Fixes bug #1125

diff -r b4094f8dccf0 -r 045b7646abb2 libmpdemux/demux_mov.c
--- a/libmpdemux/demux_mov.c	Fri Jul 04 14:35:44 2008 +0000
+++ b/libmpdemux/demux_mov.c	Fri Jul 04 15:47:31 2008 +0000
@@ -657,6 +657,10 @@
 //      36  char[]  	atom data (len=size-8)
 
 // TODO: fix parsing for files using version 2.
+		if (trak->stdata_len < 26) {
+		  mp_msg(MSGT_DEMUX, MSGL_WARN, "MOV: broken (too small) sound atom!\n");
+		  return 0;
+		}
 		version=char2short(trak->stdata,8);
 		if (version > 1)
 		  mp_msg(MSGT_DEMUX, MSGL_WARN, "MOV: version %d sound atom may not parse correctly!\n", version);