GitList

Browse code

Fixes freeing invalid addresses

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

Michael Niedermayer authored on 2013/02/13 09:03:30
Showing 1 changed files

@@ -343,6 +343,7 @@ static int read_header(ShortenContext *s)
                          s->channels = get_uint(s, CHANSIZE);
                          if (s->channels <= 0 || s->channels > MAX_CHANNELS) {
                              av_log(s->avctx, AV_LOG_ERROR, "too many channels: %d\n", s->channels);
                     +        s->channels = 0;
                              return AVERROR_INVALIDDATA;
+                         }
                          s->avctx->channels = s->channels;