From 80aa89bdff6e3e9dd6bc58d806db0cbe99403149 Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Sun, 2 Dec 2012 20:37:09 +0100 Subject: [PATCH] asfdec: check extradata size before alloc and read Signed-off-by: Michael Niedermayer --- libavformat/asfdec.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libavformat/asfdec.c b/libavformat/asfdec.c index 884390141c..2dcdf56adb 100644 --- a/libavformat/asfdec.c +++ b/libavformat/asfdec.c @@ -444,7 +444,7 @@ static int asf_read_stream_properties(AVFormatContext *s, int64_t size) tag1 = avio_rl32(pb); avio_skip(pb, 20); if (sizeX > 40) { - st->codec->extradata_size = sizeX - 40; + st->codec->extradata_size = ffio_limit(pb, sizeX - 40); st->codec->extradata = av_mallocz(st->codec->extradata_size + FF_INPUT_BUFFER_PADDING_SIZE); avio_read(pb, st->codec->extradata, st->codec->extradata_size); }