avcodec/hapdec: Check section_size for non negativity in parse_section_header()

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
10 years ago · 205c31b301
parent 0cdba4ac68
commit 205c31b301
1 changed files with 1 additions and 1 deletions
--- a/libavcodec/hapdec.c
+++ b/libavcodec/hapdec.c
@ -61,7 +61,7 @@ static int parse_section_header(GetByteContext *gbc, int *section_size,
        *section_size = bytestream2_get_le32(gbc);
    }

-    if (*section_size > bytestream2_get_bytes_left(gbc))
+    if (*section_size > bytestream2_get_bytes_left(gbc) || *section_size < 0)
        return AVERROR_INVALIDDATA;
    else
        return 0;