X-Git-Url: https://git.sesse.net/?a=blobdiff_plain;f=libavcodec%2Fhapdec.c;h=6adac21bbbd6a4f5d6005a9a86e217b517fef1ef;hb=205c31b301864e675d051b07b19b6c457cf2ab24;hp=3f036fd6906c64f5ebf95248e6fdefdf51adc880;hpb=d560c61125b3ee0ec8cd2e228f0604b63f85b8b2;p=ffmpeg

diff --git a/libavcodec/hapdec.c b/libavcodec/hapdec.c
index 3f036fd6906..6adac21bbbd 100644
--- a/libavcodec/hapdec.c
+++ b/libavcodec/hapdec.c
@@ -61,7 +61,7 @@ static int parse_section_header(GetByteContext *gbc, int *section_size,
         *section_size = bytestream2_get_le32(gbc);
     }
 
-    if (*section_size > bytestream2_get_bytes_left(gbc))
+    if (*section_size > bytestream2_get_bytes_left(gbc) || *section_size < 0)
         return AVERROR_INVALIDDATA;
     else
         return 0;