X-Git-Url: https://git.sesse.net/?a=blobdiff_plain;f=libavformat%2Fgenh.c;h=dd4e76d3d95f2e67dfa28c18476e6aa68c5f4252;hb=33e997d992ccd4e93b57fa7dfb478fc6a67ce4ac;hp=b683e026d1cdd14133a91c9e96b2308a9f566651;hpb=d8ffdefbdce16948c9b3c84df62171a7d58c8253;p=ffmpeg

diff --git a/libavformat/genh.c b/libavformat/genh.c
index b683e026d1c..dd4e76d3d95 100644
--- a/libavformat/genh.c
+++ b/libavformat/genh.c
@@ -20,6 +20,7 @@
  */
 
 #include "libavutil/intreadwrite.h"
+#include "libavcodec/internal.h"
 #include "avformat.h"
 #include "internal.h"
 
@@ -54,7 +55,7 @@ static int genh_read_header(AVFormatContext *s)
 
     st->codecpar->codec_type  = AVMEDIA_TYPE_AUDIO;
     st->codecpar->channels    = avio_rl32(s->pb);
-    if (st->codecpar->channels <= 0)
+    if (st->codecpar->channels <= 0 || st->codecpar->channels > FF_SANE_NB_CHANNELS)
         return AVERROR_INVALIDDATA;
     if (st->codecpar->channels == 1)
         st->codecpar->channel_layout = AV_CH_LAYOUT_MONO;