lmlm4: check packet_size against lower limit too

Fixes CID732224

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
Michael Niedermayer 2013-03-19 16:30:44 +01:00
parent d275f6eda8
commit 4ce03a95e2

View File

@ -93,8 +93,8 @@ static int lmlm4_read_packet(AVFormatContext *s, AVPacket *pkt) {
av_log(s, AV_LOG_ERROR, "invalid or unsupported frame_type\n");
return AVERROR(EIO);
}
if (packet_size > LMLM4_MAX_PACKET_SIZE) {
av_log(s, AV_LOG_ERROR, "packet size exceeds maximum\n");
if (packet_size > LMLM4_MAX_PACKET_SIZE || packet_size<=8) {
av_log(s, AV_LOG_ERROR, "packet size %d is invalid\n", packet_size);
return AVERROR(EIO);
}