diff options
| author | Paul B Mahol <onemda@gmail.com> | 2012-11-17 19:58:54 +0000 |
|---|---|---|
| committer | Paul B Mahol <onemda@gmail.com> | 2012-11-17 19:58:54 +0000 |
| commit | d98364edcedb71662cb1761bd30d67053d60a3c6 (patch) | |
| tree | 483773e9d03a3c26ff661e87baa62806053eff30 | |
| parent | 845724c82c1a732ab398c9e8cedd178f96f1626d (diff) | |
| download | ffmpeg-d98364edcedb71662cb1761bd30d67053d60a3c6.tar.gz | |
smush: check audio packet size
Fixes null pointer dereference.
Signed-off-by: Paul B Mahol <onemda@gmail.com>
| -rw-r--r-- | libavformat/smush.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libavformat/smush.c b/libavformat/smush.c index 19ac5d9491..9c8997cc00 100644 --- a/libavformat/smush.c +++ b/libavformat/smush.c @@ -211,7 +211,7 @@ static int smush_read_packet(AVFormatContext *ctx, AVPacket *pkt) case MKBETAG('W', 'a', 'v', 'e'): if (size < 13) return AVERROR_INVALIDDATA; - if (av_get_packet(pb, pkt, size) < 0) + if (av_get_packet(pb, pkt, size) < 13) return AVERROR(EIO); pkt->stream_index = smush->audio_stream_index; |