mpc7: return error if packet is too small.

8290d1f3 · Justin Ruggles · c8b5c4d2 · 8290d1f3
隐藏空白更改
内联并排

Showing with 1 addition and 0 deletion

libavcodec/mpc7.c libavcodec/mpc7.c +1 -0

未找到文件。
--- a/libavcodec/mpc7.c
+++ b/libavcodec/mpc7.c
@@ -203,6 +203,7 @@ static int mpc7_decode_frame(AVCodecContext * avctx,
    memset(bands, 0, sizeof(bands));
    if(buf_size <= 4){
        av_log(avctx, AV_LOG_ERROR, "Too small buffer passed (%i bytes)\n", buf_size);
+        return AVERROR(EINVAL);
    }

    out_size = (buf[1] ? c->lastframelen : MPC_FRAME_SIZE) * 4;