diff options
author | Ronald S. Bultje <rsbultje@gmail.com> | 2012-02-17 15:20:27 -0800 |
---|---|---|
committer | Ronald S. Bultje <rsbultje@gmail.com> | 2012-02-17 15:32:23 -0800 |
commit | 3e13005cac6e076053276b515f5fcf59a3f4b65d (patch) | |
tree | 911738bcef42d26bcdbf3d5cc684133554512c8f /libavcodec/rv40dsp.c | |
parent | c0994e39d7fd63b4f4adfe4714fa6e41bff82a7c (diff) | |
download | ffmpeg-3e13005cac6e076053276b515f5fcf59a3f4b65d.tar.gz |
mp3on4: require a minimum framesize.
If bufsize < headersize, init_get_bits() will be called with a negative
number, causing it to fail and any subsequent call to get_bits() will
crash because it reads from a NULL pointer.
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
Diffstat (limited to 'libavcodec/rv40dsp.c')
0 files changed, 0 insertions, 0 deletions