mirror of
https://git.ffmpeg.org/ffmpeg.git
synced 2024-12-25 00:32:31 +00:00
avformat/rtpdec_xiph: Check upper bound on len in xiph_handle_packet()
Larger packets are not supported and would cause problems later Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
parent
81198a6837
commit
aa5169935e
@ -88,7 +88,7 @@ static int xiph_handle_packet(AVFormatContext *ctx, PayloadContext *data,
|
||||
return data->split_pkts > 0;
|
||||
}
|
||||
|
||||
if (len < 6) {
|
||||
if (len < 6 || len > INT_MAX/2) {
|
||||
av_log(ctx, AV_LOG_ERROR, "Invalid %d byte packet\n", len);
|
||||
return AVERROR_INVALIDDATA;
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user