Avoid huge memory allocations from asf demuxer.

Fixes ticket #1888.
12 years ago · 6091a8d92d
parent 1d5b35cc07
commit 6091a8d92d
1 changed files with 1 additions and 0 deletions
--- a/libavformat/asfdec.c
+++ b/libavformat/asfdec.c
@ -1011,6 +1011,7 @@ static int asf_read_frame_header(AVFormatContext *s, AVIOContext *pb)
        asf->packet_obj_size = avio_rl32(pb);
        if (asf->packet_obj_size >= (1 << 24) || asf->packet_obj_size <= 0) {
            av_log(s, AV_LOG_ERROR, "packet_obj_size invalid\n");
+            asf->packet_obj_size = 0;
            return AVERROR_INVALIDDATA;
        }
        asf->packet_frag_timestamp = avio_rl32(pb); // timestamp