# HG changeset patch
# User reimar
# Date 1215720611 0
# Node ID 28f249556eccbac07c316daa7a642897378869db
# Parent  b05556cd284d8bac8d8746d9dc14146e1102e474
Only read wav header cbSize when there is enough space in header.

diff -r b05556cd284d -r 28f249556ecc libmpdemux/demux_audio.c
--- a/libmpdemux/demux_audio.c	Thu Jul 10 20:06:43 2008 +0000
+++ b/libmpdemux/demux_audio.c	Thu Jul 10 20:10:11 2008 +0000
@@ -390,7 +390,7 @@
     w->cbSize = 0;
     sh_audio->i_bps = sh_audio->wf->nAvgBytesPerSec;
     l -= 16;
-    if (l > 0) {
+    if (l >= 2) {
       w->cbSize = FFMAX(stream_read_word_le(s), 0);
       l -= 2;
       if (l < w->cbSize) {