lmlm4: check packet_size against lower limit too

Fixes CID732224

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
pull/13/head
Michael Niedermayer 12 years ago
parent d275f6eda8
commit 4ce03a95e2
  1. 4
      libavformat/lmlm4.c

@ -93,8 +93,8 @@ static int lmlm4_read_packet(AVFormatContext *s, AVPacket *pkt) {
av_log(s, AV_LOG_ERROR, "invalid or unsupported frame_type\n");
return AVERROR(EIO);
}
if (packet_size > LMLM4_MAX_PACKET_SIZE) {
av_log(s, AV_LOG_ERROR, "packet size exceeds maximum\n");
if (packet_size > LMLM4_MAX_PACKET_SIZE || packet_size<=8) {
av_log(s, AV_LOG_ERROR, "packet size %d is invalid\n", packet_size);
return AVERROR(EIO);
}

Loading…
Cancel
Save