commit 2e1e3c1e41b67b11d06e077255e31886550510c6
author Laurent Aimar <fenrir@videolan.org> Sat Oct 01 00:44:54 2011 +0200
committer Michael Niedermayer <michaelni@gmx.at> Sun Nov 06 19:49:12 2011 +0100
tree e0870adfc704a591b216bae7c8da6023dc538ecf
parent 635256a324f4644bbfa2f4332e950a183f82c4c9

Check for corrupted data in avs demuxer.

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 1cce7def0a8eff2e7db294b7d195a0fb1a5043b0)

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

libavformat/avs.c

diff --git a/libavformat/avs.c b/libavformat/avs.c
index 1fcb19f..878898e 100644
--- a/libavformat/avs.c
+++ b/libavformat/avs.c
@@ -163,6 +163,8 @@
             sub_type = get_byte(s->pb);
             type = get_byte(s->pb);
             size = get_le16(s->pb);
+            if (size < 4)
+                return AVERROR_INVALIDDATA;
             avs->remaining_frame_size -= size;
 
             switch (type) {