ape: check that number of seektable entries is equal to number of frames
fixes issue2480 Signed-off-by: Anton Khirnov <anton@khirnov.net>
This commit is contained in:

committed by
Anton Khirnov

parent
e006d71fa8
commit
29a290439b
@@ -250,6 +250,11 @@ static int ape_read_header(AVFormatContext * s, AVFormatParameters * ap)
|
|||||||
av_log(s, AV_LOG_ERROR, "Too many frames: %d\n", ape->totalframes);
|
av_log(s, AV_LOG_ERROR, "Too many frames: %d\n", ape->totalframes);
|
||||||
return -1;
|
return -1;
|
||||||
}
|
}
|
||||||
|
if (ape->seektablelength && (ape->seektablelength / sizeof(*ape->seektable)) < ape->totalframes) {
|
||||||
|
av_log(s, AV_LOG_ERROR, "Number of seek entries is less than number of frames: %d vs. %d\n",
|
||||||
|
ape->seektablelength / sizeof(*ape->seektable), ape->totalframes);
|
||||||
|
return AVERROR_INVALIDDATA;
|
||||||
|
}
|
||||||
ape->frames = av_malloc(ape->totalframes * sizeof(APEFrame));
|
ape->frames = av_malloc(ape->totalframes * sizeof(APEFrame));
|
||||||
if(!ape->frames)
|
if(!ape->frames)
|
||||||
return AVERROR(ENOMEM);
|
return AVERROR(ENOMEM);
|
||||||
|
Reference in New Issue
Block a user