X-Git-Url: https://git.sesse.net/?a=blobdiff_plain;f=libavformat%2Fxwma.c;h=aedadcf14053dc59a75702fe7ad74abed13f57ef;hb=ef6a9e5e311f09fa8032974fa4d0c1e166a959bb;hp=f357c3e881250404a5151e97c5c5d4502ba9ab3b;hpb=94346ab593f3fc0822f11d3e3f378f9944ad2d40;p=ffmpeg diff --git a/libavformat/xwma.c b/libavformat/xwma.c index f357c3e8812..aedadcf1405 100644 --- a/libavformat/xwma.c +++ b/libavformat/xwma.c @@ -34,7 +34,7 @@ typedef struct XWMAContext { int64_t data_end; } XWMAContext; -static int xwma_probe(AVProbeData *p) +static int xwma_probe(const AVProbeData *p) { if (!memcmp(p->buf, "RIFF", 4) && !memcmp(p->buf + 8, "XWMA", 4)) return AVPROBE_SCORE_MAX; @@ -60,16 +60,16 @@ static int xwma_read_header(AVFormatContext *s) /* check RIFF header */ tag = avio_rl32(pb); if (tag != MKTAG('R', 'I', 'F', 'F')) - return -1; + return AVERROR_INVALIDDATA; avio_rl32(pb); /* file size */ tag = avio_rl32(pb); if (tag != MKTAG('X', 'W', 'M', 'A')) - return -1; + return AVERROR_INVALIDDATA; /* parse fmt header */ tag = avio_rl32(pb); if (tag != MKTAG('f', 'm', 't', ' ')) - return -1; + return AVERROR_INVALIDDATA; size = avio_rl32(pb); st = avformat_new_stream(s, NULL); if (!st) @@ -130,15 +130,15 @@ static int xwma_read_header(AVFormatContext *s) avpriv_request_sample(s, "Unexpected extradata (%d bytes)", st->codecpar->extradata_size); } else if (st->codecpar->codec_id == AV_CODEC_ID_WMAPRO) { - if (ff_alloc_extradata(st->codecpar, 18)) - return AVERROR(ENOMEM); + if ((ret = ff_alloc_extradata(st->codecpar, 18)) < 0) + return ret; memset(st->codecpar->extradata, 0, st->codecpar->extradata_size); st->codecpar->extradata[ 0] = st->codecpar->bits_per_coded_sample; st->codecpar->extradata[14] = 224; } else { - if (ff_alloc_extradata(st->codecpar, 6)) - return AVERROR(ENOMEM); + if ((ret = ff_alloc_extradata(st->codecpar, 6)) < 0) + return ret; memset(st->codecpar->extradata, 0, st->codecpar->extradata_size); /* setup extradata with our experimentally obtained value */ @@ -211,6 +211,10 @@ static int xwma_read_header(AVFormatContext *s) } for (i = 0; i < dpds_table_size; ++i) { + if (avio_feof(pb)) { + ret = AVERROR_INVALIDDATA; + goto fail; + } dpds_table[i] = avio_rl32(pb); size -= 4; }