On Sun, Oct 16, 2016 at 10:41:32PM +0200, Andreas Cadhalpun wrote:
> Signed-off-by: Andreas Cadhalpun <andreas.cadhal...@googlemail.com>
> ---
>  libavformat/astdec.c | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/libavformat/astdec.c b/libavformat/astdec.c
> index f3ca721..7a53d0b 100644
> --- a/libavformat/astdec.c
> +++ b/libavformat/astdec.c
> @@ -90,7 +90,7 @@ static int ast_read_packet(AVFormatContext *s, AVPacket 
> *pkt)
>      pos  = avio_tell(s->pb);
>      type = avio_rl32(s->pb);
>      size = avio_rb32(s->pb);
> -    if (size > INT_MAX / s->streams[0]->codecpar->channels)
> +    if (!s->streams[0]->codecpar->channels || size > INT_MAX / 
> s->streams[0]->codecpar->channels)

channels seems already checked in ast_read_header()

[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

No great genius has ever existed without some touch of madness. -- Aristotle

Attachment: signature.asc
Description: Digital signature

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
http://ffmpeg.org/mailman/listinfo/ffmpeg-devel

Reply via email to