diff --git a/libavformat/rtpdec.c b/libavformat/rtpdec.c index 9fc30d7b66..bc0aea6100 100644 --- a/libavformat/rtpdec.c +++ b/libavformat/rtpdec.c @@ -114,7 +114,7 @@ static int rtcp_parse_packet(RTPDemuxContext *s, const unsigned char *buf, int l while (len >= 2) { switch (buf[1]) { case RTCP_SR: - if (len < 16) { + if (len < 20) { av_log(NULL, AV_LOG_ERROR, "Invalid length for RTCP SR packet\n"); return AVERROR_INVALIDDATA; }