apetag: make sure avio_get_str() doesn't read more than it should.
authorAnton Khirnov <anton@khirnov.net>
Tue, 26 Jun 2012 16:49:04 +0000 (18:49 +0200)
committerAnton Khirnov <anton@khirnov.net>
Mon, 2 Jul 2012 14:15:34 +0000 (16:15 +0200)
libavformat/apetag.c

index 68c987e..e5c839e 100644 (file)
@@ -59,7 +59,7 @@ static int ape_tag_read_field(AVFormatContext *s)
         AVStream *st = avformat_new_stream(s, NULL);
         if (!st)
             return AVERROR(ENOMEM);
-        avio_get_str(pb, INT_MAX, filename, sizeof(filename));
+        avio_get_str(pb, size, filename, sizeof(filename));
         st->codec->extradata = av_malloc(size + FF_INPUT_BUFFER_PADDING_SIZE);
         if (!st->codec->extradata)
             return AVERROR(ENOMEM);