diff --git a/libavformat/bit.c b/libavformat/bit.c index 114d23dfc4..5fb3d552f3 100644 --- a/libavformat/bit.c +++ b/libavformat/bit.c @@ -72,7 +72,8 @@ static int read_packet(AVFormatContext *s, sync = get_le16(pb); // sync word packet_size = get_le16(pb) / 8; - assert(packet_size < 8 * MAX_FRAME_SIZE); + if(packet_size > MAX_FRAME_SIZE) + return AVERROR(EIO); ret = get_buffer(pb, (uint8_t*)buf, (8 * packet_size) * sizeof(uint16_t)); if(ret<0)