Merge commit '8c929037ec75fbe9f367e0a31ee34839e92de481'

[ffmpeg] / libavformat / astdec.c

diff --git a/libavformat/astdec.c b/libavformat/astdec.c
index f3ca721ccfe4ebe8e9043867de90c95c1ddbd5a6..7a53d0bb7080030764f83001fecd89289604cdb8 100644 (file)
--- a/libavformat/astdec.c
+++ b/libavformat/astdec.c
@@ -90,7 +90,7 @@ static int ast_read_packet(AVFormatContext *s, AVPacket *pkt)
     pos  = avio_tell(s->pb);
     type = avio_rl32(s->pb);
     size = avio_rb32(s->pb);
-    if (size > INT_MAX / s->streams[0]->codecpar->channels)
+    if (!s->streams[0]->codecpar->channels || size > INT_MAX / s->streams[0]->codecpar->channels)
         return AVERROR_INVALIDDATA;
 
     size *= s->streams[0]->codecpar->channels;