buffer overflow

Originally committed as revision 3954 to svn://svn.ffmpeg.org/ffmpeg/trunk
20 years ago · a8d02f2bc9
parent 7be806f31b
commit a8d02f2bc9
1 changed files with 3 additions and 0 deletions
--- a/libavcodec/pcm.c
+++ b/libavcodec/pcm.c
@ -299,6 +299,9 @@ static int pcm_decode_frame(AVCodecContext *avctx,
    samples = data;
    src = buf;

+    if(buf_size > AVCODEC_MAX_AUDIO_FRAME_SIZE/2)
+        buf_size = AVCODEC_MAX_AUDIO_FRAME_SIZE/2;
+
    switch(avctx->codec->id) {
    case CODEC_ID_PCM_S16LE:
        n = buf_size >> 1;