check that len is not negative

Originally committed as revision 18961 to svn://svn.ffmpeg.org/ffmpeg/trunk
This commit is contained in:
Baptiste Coudurier 2009-05-27 00:46:20 +00:00
parent 0c1375575a
commit a5685be502
1 changed files with 2 additions and 0 deletions

View File

@ -892,6 +892,8 @@ static void mpegts_push_data(MpegTSFilter *filter,
/* PES packing parsing */
case MPEGTS_PESHEADER_FILL:
len = pes->pes_header_size - pes->data_index;
if (len < 0)
return
if (len > buf_size)
len = buf_size;
memcpy(pes->header + pes->data_index, p, len);