mirror of
https://git.ffmpeg.org/ffmpeg.git
synced 2026-06-16 04:32:47 +02:00
avformat/iamf_parse.c: Fix potential integer overflow in opus_decoder_config()
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
committed by
michaelni
parent
8439e02037
commit
016a241102
@@ -38,7 +38,7 @@ static int opus_decoder_config(IAMFCodecConfig *codec_config,
|
||||
{
|
||||
int ret, left = len - avio_tell(pb);
|
||||
|
||||
if (left < 11 || codec_config->audio_roll_distance >= 0)
|
||||
if (left < 11 || codec_config->audio_roll_distance >= 0 || left > INT_MAX - 8)
|
||||
return AVERROR_INVALIDDATA;
|
||||
|
||||
codec_config->extradata = av_malloc(left + 8);
|
||||
|
||||
Reference in New Issue
Block a user