Browse Source

id3v2: reject APICs with size of 0

fixes ticket #1324

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
tags/n0.11
Piotr Bandurski Michael Niedermayer 13 years ago
parent
commit
4d18f4c15b
1 changed files with 1 additions and 1 deletions
  1. +1
    -1
      libavformat/id3v2.c

+ 1
- 1
libavformat/id3v2.c View File

@@ -488,7 +488,7 @@ static void read_apic(AVFormatContext *s, AVIOContext *pb, int taglen, char *tag

apic->len = taglen;
apic->data = av_malloc(taglen);
if (!apic->data || avio_read(pb, apic->data, taglen) != taglen)
if (!apic->data || !apic->len || avio_read(pb, apic->data, taglen) != taglen)
goto fail;

new_extra->tag = "APIC";


Loading…
Cancel
Save