From 08bd22a61b820160bff5f98cd51d2e0135d02e00 Mon Sep 17 00:00:00 2001
From: Justin Ruggles <justin.ruggles@gmail.com>
Date: Sun, 11 Sep 2011 13:18:51 -0400
Subject: [PATCH] dpcm: return error if packet is too small

---
 libavcodec/dpcm.c | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/libavcodec/dpcm.c b/libavcodec/dpcm.c
index d4cf806b82..6ba8ab13ce 100644
--- a/libavcodec/dpcm.c
+++ b/libavcodec/dpcm.c
@@ -201,7 +201,10 @@ static int dpcm_decode_frame(AVCodecContext *avctx, void *data, int *data_size,
         break;
     }
     out *= av_get_bytes_per_sample(avctx->sample_fmt);
-
+    if (out < 0) {
+        av_log(avctx, AV_LOG_ERROR, "packet is too small\n");
+        return AVERROR(EINVAL);
+    }
     if (*data_size < out) {
         av_log(avctx, AV_LOG_ERROR, "output buffer is too small\n");
         return AVERROR(EINVAL);