From 80d22ebb9fe990fb75f60bbdcbde6ab2ef2763b9 Mon Sep 17 00:00:00 2001
From: reimar <reimar@b3059339-0415-0410-9bf9-f77b7e298cf2>
Date: Tue, 29 Jan 2008 22:00:58 +0000
Subject: Properly check length of flac metadata.

git-svn-id: svn://svn.mplayerhq.hu/mplayer/trunk@25917 b3059339-0415-0410-9bf9-f77b7e298cf2
---
 libmpdemux/demux_audio.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/libmpdemux/demux_audio.c b/libmpdemux/demux_audio.c
index fa86b1d242..58ec382c7f 100644
--- a/libmpdemux/demux_audio.c
+++ b/libmpdemux/demux_audio.c
@@ -229,6 +229,8 @@ get_flac_metadata (demuxer_t* demuxer)
           ptr += 4;
 
           comment = ptr;
+          if (&comment[length] < comments || &comment[length] >= &comments[blk_len])
+            return;
           c = comment[length];
           comment[length] = 0;
 
-- 
cgit v1.2.3