diff options
| author | reimar <reimar@b3059339-0415-0410-9bf9-f77b7e298cf2> | 2008-01-29 22:00:58 +0000 |
|---|---|---|
| committer | reimar <reimar@b3059339-0415-0410-9bf9-f77b7e298cf2> | 2008-01-29 22:00:58 +0000 |
| commit | 80d22ebb9fe990fb75f60bbdcbde6ab2ef2763b9 (patch) | |
| tree | 67eb509761fd6b09ddf3ff9eb94c65a4af790d10 /libmpdemux | |
| parent | 4bdd01ab18dff37732e5aba32619db5b9aee31bb (diff) | |
| download | mpv-80d22ebb9fe990fb75f60bbdcbde6ab2ef2763b9.tar.bz2 mpv-80d22ebb9fe990fb75f60bbdcbde6ab2ef2763b9.tar.xz | |
Properly check length of flac metadata.
git-svn-id: svn://svn.mplayerhq.hu/mplayer/trunk@25917 b3059339-0415-0410-9bf9-f77b7e298cf2
Diffstat (limited to 'libmpdemux')
| -rw-r--r-- | libmpdemux/demux_audio.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/libmpdemux/demux_audio.c b/libmpdemux/demux_audio.c index fa86b1d242..58ec382c7f 100644 --- a/libmpdemux/demux_audio.c +++ b/libmpdemux/demux_audio.c @@ -229,6 +229,8 @@ get_flac_metadata (demuxer_t* demuxer) ptr += 4; comment = ptr; + if (&comment[length] < comments || &comment[length] >= &comments[blk_len]) + return; c = comment[length]; comment[length] = 0; |