diff options
| author | Michael Niedermayer <michaelni@gmx.at> | 2013-03-19 16:30:44 +0100 |
|---|---|---|
| committer | Michael Niedermayer <michaelni@gmx.at> | 2013-03-19 16:30:44 +0100 |
| commit | 4ce03a95e27d618a2c65b1ed134a72b48bbbff00 (patch) | |
| tree | 98b02aa5314417ba7e461b67b13faac438c63ed2 | |
| parent | d275f6eda81bdeac7f6182221a8c07d4449661d6 (diff) | |
| download | ffmpeg-4ce03a95e27d618a2c65b1ed134a72b48bbbff00.tar.gz | |
lmlm4: check packet_size against lower limit too
Fixes CID732224
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
| -rw-r--r-- | libavformat/lmlm4.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/libavformat/lmlm4.c b/libavformat/lmlm4.c index 29ee2a3adc..c8ea42168b 100644 --- a/libavformat/lmlm4.c +++ b/libavformat/lmlm4.c @@ -93,8 +93,8 @@ static int lmlm4_read_packet(AVFormatContext *s, AVPacket *pkt) { av_log(s, AV_LOG_ERROR, "invalid or unsupported frame_type\n"); return AVERROR(EIO); } - if (packet_size > LMLM4_MAX_PACKET_SIZE) { - av_log(s, AV_LOG_ERROR, "packet size exceeds maximum\n"); + if (packet_size > LMLM4_MAX_PACKET_SIZE || packet_size<=8) { + av_log(s, AV_LOG_ERROR, "packet size %d is invalid\n", packet_size); return AVERROR(EIO); } |