From bbc10a1aa537c75224b14252eb94c4c829c61a3b Mon Sep 17 00:00:00 2001
From: Lazaros Koromilas <lostd@2f30.org>
Date: Tue, 27 May 2014 14:38:44 +0300
Subject: [PATCH] libavformat/utils: Fix segfault on m4a cover artwork parsing

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
---
 libavformat/utils.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/libavformat/utils.c b/libavformat/utils.c
index f35e956f74..357627924a 100644
--- a/libavformat/utils.c
+++ b/libavformat/utils.c
@@ -517,6 +517,8 @@ int avformat_queue_attached_pictures(AVFormatContext *s)
         if (s->streams[i]->disposition & AV_DISPOSITION_ATTACHED_PIC &&
             s->streams[i]->discard < AVDISCARD_ALL) {
             AVPacket copy = s->streams[i]->attached_pic;
+            if (copy.size <= 0)
+                return AVERROR(EINVAL);
             copy.buf = av_buffer_ref(copy.buf);
             if (!copy.buf)
                 return AVERROR(ENOMEM);