avformat/mov: Fix potential integer overflow in mov_read_keys
authorSergey Volk <servolk@google.com>
Wed, 7 Sep 2016 21:05:35 +0000 (14:05 -0700)
committerMichael Niedermayer <michael@niedermayer.cc>
Thu, 8 Sep 2016 09:35:44 +0000 (11:35 +0200)
commit347cb14b7cba7560e53f4434b419b9d8800253e7
tree96346dc1068f1ce8232498ba4d004bd69c408607
parent26a19f8e92782fa803fc274b5501200d218c2735
avformat/mov: Fix potential integer overflow in mov_read_keys

Actual allocation size is computed as (count + 1)*sizeof(meta_keys), so
we need to check that (count + 1) won't cause overflow.

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
libavformat/mov.c