Merge remote-tracking branch 'cehoyos/master'

[ffmpeg] / libavformat / redspark.c

diff --git a/libavformat/redspark.c b/libavformat/redspark.c
index 44d5da77fb3833fde20fbda7232439a0339f3db9..3963261b9a310d74a8e9c9659ee576aab87b9b86 100644 (file)
--- a/libavformat/redspark.c
+++ b/libavformat/redspark.c
@@ -108,6 +108,11 @@ static int redspark_read_header(AVFormatContext *s)
     if (bytestream2_get_byteu(&gbc)) // Loop flag
         coef_off += 16;
 
+    if (coef_off + codec->channels * (32 + 14) > HEADER_SIZE) {
+        ret = AVERROR_INVALIDDATA;
+        goto fail;
+    }
+
     codec->extradata_size = 32 * codec->channels;
     codec->extradata = av_malloc(codec->extradata_size);
     if (!codec->extradata) {