aac: check the buffer length in the ADIF parser

Check whether enough data has been read yet.

aac: check the buffer length in the ADIF parser
e19b53f8 · Max Kellermann · b30ec730 · e19b53f8
Commit e19b53f8 authored Nov 12, 2008 by Max Kellermann
Hide whitespace changes
Inline Side-by-side

Showing with 6 additions and 0 deletions

aac_plugin.c src/decoder/aac_plugin.c +6 -0

No files found.
--- a/src/decoder/aac_plugin.c
+++ b/src/decoder/aac_plugin.c
@@ -220,6 +220,12 @@ static void aac_parse_header(AacBuffer * b, float *length)
 		unsigned bitRate;
 		size_t skipSize = (b->buffer[4] & 0x80) ? 9 : 0;

+
+		if (8 + skipSize > b->bytesIntoBuffer)
+			/* not enough data yet; skip parsing this
+			   header */
+			return;
+
 		bitRate =
 		    ((unsigned int)(b->
 				    buffer[4 +