[SCM] libav/experimental: TTA : Check if the output buffer size is within bounds.
siretart at users.alioth.debian.org
siretart at users.alioth.debian.org
Sun Jun 30 17:05:21 UTC 2013
The following commit has been merged in the experimental branch:
commit bac6ed4aebb5f25012b3b6293dab7df2767f8401
Author: Jai Menon <jmenon86 at gmail.com>
Date: Sun Mar 28 17:17:48 2010 +0000
TTA : Check if the output buffer size is within bounds.
Fixes issue 1848.
Originally committed as revision 22711 to svn://svn.ffmpeg.org/ffmpeg/trunk
diff --git a/libavcodec/tta.c b/libavcodec/tta.c
index 7dd4cc5..61ac287 100644
--- a/libavcodec/tta.c
+++ b/libavcodec/tta.c
@@ -302,6 +302,10 @@ static int tta_decode_frame(AVCodecContext *avctx,
int cur_chan = 0, framelen = s->frame_length;
int32_t *p;
+ if (*data_size < (framelen * s->channels * 2)) {
+ av_log(avctx, AV_LOG_ERROR,"Output buffer size is too small.\n");
+ return -1;
+ }
// FIXME: seeking
s->total_frames--;
if (!s->total_frames && s->last_frame_length)
--
Libav/FFmpeg packaging
More information about the pkg-multimedia-commits
mailing list