diff --git a/libavcodec/tta.c b/libavcodec/tta.c index 7dd4cc5059..61ac28777c 100644 --- a/libavcodec/tta.c +++ b/libavcodec/tta.c @@ -302,6 +302,10 @@ static int tta_decode_frame(AVCodecContext *avctx, int cur_chan = 0, framelen = s->frame_length; int32_t *p; + if (*data_size < (framelen * s->channels * 2)) { + av_log(avctx, AV_LOG_ERROR,"Output buffer size is too small.\n"); + return -1; + } // FIXME: seeking s->total_frames--; if (!s->total_frames && s->last_frame_length)