shorten: validate that the channel count in the header is not <= 0

This commit is contained in:
Justin Ruggles 2012-10-23 00:40:51 -04:00
parent 4e13e50432
commit 4c53f4aed3

View File

@ -342,7 +342,7 @@ static int read_header(ShortenContext *s)
s->internal_ftype = get_uint(s, TYPESIZE);
s->channels = get_uint(s, CHANSIZE);
if (s->channels > MAX_CHANNELS) {
if (s->channels <= 0 || s->channels > MAX_CHANNELS) {
av_log(s->avctx, AV_LOG_ERROR, "too many channels: %d\n", s->channels);
return -1;
}