static int dcstr_read_header(AVFormatContext *s)
{
unsigned codec, align;
+ int mult;
AVStream *st;
st = avformat_new_stream(s, NULL);
align = avio_rl32(s->pb);
avio_skip(s->pb, 4);
st->duration = avio_rl32(s->pb);
- st->codecpar->channels *= avio_rl32(s->pb);
+ mult = avio_rl32(s->pb);
+ if (st->codecpar->channels <= 0 || mult <= 0 || mult > INT_MAX / st->codecpar->channels) {
+ av_log(s, AV_LOG_ERROR, "invalid number of channels %d x %d\n", st->codecpar->channels, mult);
+ return AVERROR_INVALIDDATA;
+ }
+ st->codecpar->channels *= mult;
if (!align || align > INT_MAX / st->codecpar->channels)
return AVERROR_INVALIDDATA;
st->codecpar->block_align = align * st->codecpar->channels;