RepoMirrors
/
ffmpeg
mirror of https://git.ffmpeg.org/ffmpeg.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

TTA : Check if the output buffer size is within bounds. 

Fixes issue 1848.

Originally committed as revision 22711 to svn://svn.ffmpeg.org/ffmpeg/trunk
This commit is contained in:
Jai Menon 2010-03-28 17:17:48 +00:00
parent 0f943ce663
commit bac6ed4aeb
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
libavcodec/tta.c
View File

@ -302,6 +302,10 @@ static int tta_decode_frame(AVCodecContext *avctx,
int cur_chan = 0, framelen = s->frame_length;
int32_t *p;
if (*data_size < (framelen * s->channels * 2)) {
av_log(avctx, AV_LOG_ERROR,"Output buffer size is too small.\n");
return -1;
}
// FIXME: seeking
s->total_frames--;
if (!s->total_frames && s->last_frame_length)