diff --git a/libavformat/asfdec_o.c b/libavformat/asfdec_o.c index 3f43fd1b47..2af14afab9 100644 --- a/libavformat/asfdec_o.c +++ b/libavformat/asfdec_o.c @@ -1676,6 +1676,9 @@ static int detect_unknown_subobject(AVFormatContext *s, int64_t offset, int64_t ff_asf_guid guid; int ret; + if (offset > INT64_MAX - size) + return AVERROR_INVALIDDATA; + while (avio_tell(pb) <= offset + size) { if (avio_tell(pb) == asf->offset) break;