riff: Validate the wav header size before trying to parse it
authorLuca Barbato <lu_zero@gentoo.org>
Sun, 28 Jun 2015 15:32:40 +0000 (17:32 +0200)
committerLuca Barbato <lu_zero@gentoo.org>
Sun, 28 Jun 2015 15:32:40 +0000 (17:32 +0200)
libavformat/riffdec.c

index 74f93ac..2c43afc 100644 (file)
@@ -79,6 +79,9 @@ int ff_get_wav_header(AVIOContext *pb, AVCodecContext *codec, int size)
 {
     int id;
 
+    if (size < 14)
+        return AVERROR_INVALIDDATA;
+
     id                 = avio_rl16(pb);
     codec->codec_type  = AVMEDIA_TYPE_AUDIO;
     codec->channels    = avio_rl16(pb);