diff options
| author | Michael Niedermayer <michaelni@gmx.at> | 2013-09-20 13:05:37 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michaelni@gmx.at> | 2013-09-20 13:06:12 +0200 |
| commit | 3f4cf77abde20b83832b8860882f4a4c9c0e8572 (patch) | |
| tree | 7c837661178f07dc18daf5fab68cdf4d0e546d1d | |
| parent | 13b353a7cb27b5c749c2e7bc987053a566445efb (diff) | |
| parent | e9d61de96c113ee0ef8082833c7e682df0e23eec (diff) | |
| download | ffmpeg-3f4cf77abde20b83832b8860882f4a4c9c0e8572.tar.gz | |
Merge commit 'e9d61de96c113ee0ef8082833c7e682df0e23eec'
* commit 'e9d61de96c113ee0ef8082833c7e682df0e23eec':
mpegaudiodec: Validate that the number of channels fits at the given offset
Conflicts:
libavcodec/mpegaudiodec.c
See: 51fcf276f8ce66be530549da6b8d96a4bd3087aa
Merged-by: Michael Niedermayer <michaelni@gmx.at>
| -rw-r--r-- | libavcodec/mpegaudiodec.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/libavcodec/mpegaudiodec.c b/libavcodec/mpegaudiodec.c index 2834ba54c9..4c6376b4a2 100644 --- a/libavcodec/mpegaudiodec.c +++ b/libavcodec/mpegaudiodec.c @@ -1963,7 +1963,8 @@ static int decode_frame_mp3on4(AVCodecContext *avctx, void *data, avpriv_mpegaudio_decode_header((MPADecodeHeader *)m, header); - if (ch + m->nb_channels > avctx->channels || s->coff[fr] + m->nb_channels > avctx->channels) { + if (ch + m->nb_channels > avctx->channels || + s->coff[fr] + m->nb_channels > avctx->channels) { av_log(avctx, AV_LOG_ERROR, "frame channel count exceeds codec " "channel count\n"); return AVERROR_INVALIDDATA; |