diff --git a/libavformat/asfenc.c b/libavformat/asfenc.c index 90d5c263170ba50904874ca08c85c96ba44b3f18..87993b64c948b3277968d035ad34be066681096a 100644 --- a/libavformat/asfenc.c +++ b/libavformat/asfenc.c @@ -964,6 +964,11 @@ static int asf_write_packet(AVFormatContext *s, AVPacket *pkt) pts = (pkt->pts != AV_NOPTS_VALUE) ? pkt->pts : pkt->dts; av_assert0(pts != AV_NOPTS_VALUE); + if ( pts < - PREROLL_TIME + || pts > (INT_MAX-3)/10000LL * ASF_INDEXED_INTERVAL - PREROLL_TIME) { + av_log(s, AV_LOG_ERROR, "input pts %"PRId64" is invalid\n", pts); + return AVERROR(EINVAL); + } pts *= 10000; asf->duration = FFMAX(asf->duration, pts + pkt->duration * 10000);