[FFmpeg-soc] [soc]: r2571 - mlp/mlpdec.c

[ramiro]

Author: ramiro
Date: Wed Jun 25 02:40:14 2008
New Revision: 2571

Log:
Prevent negative lengths to be calculated from coded "end" values.

Modified:
   mlp/mlpdec.c

Modified: mlp/mlpdec.c
==============================================================================
--- mlp/mlpdec.c	(original)
+++ mlp/mlpdec.c	Wed Jun 25 02:40:14 2008
@@ -1033,6 +1033,14 @@ static int read_access_unit(AVCodecConte
             end = length - header_size;
         }
 
+        if (end < substream_start) {
+            av_log(avctx, AV_LOG_INFO,
+                   "Substream %d data indicated end offset "
+                   "is before calculated start offset.\n",
+                   substr);
+            goto error;
+        }
+
         if (substr > m->max_decoded_substream)
             continue;