diff --git a/libavformat/aviobuf.c b/libavformat/aviobuf.c index 8955825d87..baf7d600a6 100644 --- a/libavformat/aviobuf.c +++ b/libavformat/aviobuf.c @@ -220,6 +220,9 @@ int64_t avio_seek(AVIOContext *s, int64_t offset, int whence) return offset1; offset += offset1; } + if (offset < 0) + return AVERROR(EINVAL); + offset1 = offset - pos; if (!s->must_flush && (!s->direct || !s->seek) && offset1 >= 0 && offset1 <= buffer_size) {