diff options
author | uau <uau@b3059339-0415-0410-9bf9-f77b7e298cf2> | 2009-07-27 16:53:48 +0000 |
---|---|---|
committer | uau <uau@b3059339-0415-0410-9bf9-f77b7e298cf2> | 2009-07-27 16:53:48 +0000 |
commit | 4dc235eb7cf07d124229e6d6f55ba5910353f986 (patch) | |
tree | 4bf1b465a26b2b546dde403e8612b24ce1eea411 /stream/realrtsp | |
parent | 53d51201523e56a2b01cb956c161097b28aa60a5 (diff) | |
download | mpv-4dc235eb7cf07d124229e6d6f55ba5910353f986.tar.bz2 mpv-4dc235eb7cf07d124229e6d6f55ba5910353f986.tar.xz |
stream/realrtsp/real.c: Fix integer overflow
Pointed-out-by: tixxDZ <tixxdz at gmail dot com> - DZCORE Labs, Algeria
git-svn-id: svn://svn.mplayerhq.hu/mplayer/trunk@29447 b3059339-0415-0410-9bf9-f77b7e298cf2
Diffstat (limited to 'stream/realrtsp')
-rw-r--r-- | stream/realrtsp/real.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/stream/realrtsp/real.c b/stream/realrtsp/real.c index 9f01a5dfb0..2e2b8cd9ca 100644 --- a/stream/realrtsp/real.c +++ b/stream/realrtsp/real.c @@ -386,6 +386,8 @@ int real_get_rdt_chunk(rtsp_t *rtsp_session, char **buffer, int rdt_rawdata) { return (n <= 0) ? 0 : n; } rmff_dump_pheader(&ph, *buffer); + if (size < 12) + return 0; size-=12; n=rtsp_read_data(rtsp_session, (*buffer)+12, size); |