Fix potential overread in vmd audio decoder.
Signed-off-by: Michael Niedermayer <michaelni@gmx.at> (cherry picked from commit 00cbe9e4053fd562b6f21e76aca6636ff926b637)
This commit is contained in:
parent
be22dc60f5
commit
21c9d92646
@ -523,7 +523,10 @@ static int vmdaudio_decode_frame(AVCodecContext *avctx,
|
||||
|
||||
silent_chunks = 0;
|
||||
if (block_type == BLOCK_TYPE_INITIAL) {
|
||||
uint32_t flags = AV_RB32(buf);
|
||||
uint32_t flags;
|
||||
if (buf_size < 4)
|
||||
return -1;
|
||||
flags = AV_RB32(buf);
|
||||
silent_chunks = av_popcount(flags);
|
||||
buf += 4;
|
||||
buf_size -= 4;
|
||||
|
Loading…
x
Reference in New Issue
Block a user