Ronald S. Bultje 3e13005cac mp3on4: require a minimum framesize. ...

If bufsize < headersize, init_get_bits() will be called with a negative
number, causing it to fail and any subsequent call to get_bits() will
crash because it reads from a NULL pointer.

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org

2012-02-17 15:32:23 -08:00

67 KiB

Raw Blame History

View Raw