8svx: check packet size before reading the initial sample value.

13 years ago · 0ac3b8fc4a
parent e371878416
commit 0ac3b8fc4a
1 changed files with 4 additions and 0 deletions
--- a/libavcodec/8svx.c
+++ b/libavcodec/8svx.c
@ -74,6 +74,10 @@ static int eightsvx_decode_frame(AVCodecContext *avctx, void *data, int *data_si
    int consumed = buf_size;

    if(avctx->frame_number == 0) {
+        if (buf_size < 2) {
+            av_log(avctx, AV_LOG_ERROR, "packet size is too small\n");
+            return AVERROR(EINVAL);
+        }
        esc->fib_acc = (int8_t)buf[1] + 128;
        buf_size -= 2;
        buf += 2;