On Tue, Oct 04, 2011 at 05:51:22PM -0400, Justin Ruggles wrote:
> ---
>  libavcodec/smacker.c |    5 +++++
>  1 files changed, 5 insertions(+), 0 deletions(-)
> 
> diff --git a/libavcodec/smacker.c b/libavcodec/smacker.c
> index f3dec7f..20ddc15 100644
> --- a/libavcodec/smacker.c
> +++ b/libavcodec/smacker.c
> @@ -586,6 +586,11 @@ static int smka_decode_frame(AVCodecContext *avctx, void 
> *data, int *data_size,
>      int bits, stereo;
>      int pred[2] = {0, 0};
>  
> +    if (buf_size <= 4) {
> +        av_log(avctx, AV_LOG_ERROR, "packet is too small\n");
> +        return AVERROR(EINVAL);
> +    }
> +
>      unp_size = AV_RL32(buf);
>  
>      init_get_bits(&gb, buf + 4, (buf_size - 4) * 8);
> -- 

LGTM
_______________________________________________
libav-devel mailing list
[email protected]
https://lists.libav.org/mailman/listinfo/libav-devel

Reply via email to