From a5ef7960fc96ed773acc4149104d6acf534e8a87 Mon Sep 17 00:00:00 2001 From: wm4 Date: Sun, 11 Aug 2013 17:40:33 +0200 Subject: [PATCH] ape: check avio_read() return value This sets pkt->size to absurd values on failure otherwise. Signed-off-by: Michael Niedermayer --- libavformat/ape.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/libavformat/ape.c b/libavformat/ape.c index e2b8adae86..bb61a2498d 100644 --- a/libavformat/ape.c +++ b/libavformat/ape.c @@ -414,6 +414,8 @@ static int ape_read_packet(AVFormatContext * s, AVPacket * pkt) AV_WL32(pkt->data , nblocks); AV_WL32(pkt->data + 4, ape->frames[ape->currentframe].skip); ret = avio_read(s->pb, pkt->data + extra_size, ape->frames[ape->currentframe].size); + if (ret < 0) + return ret; pkt->pts = ape->frames[ape->currentframe].pts; pkt->stream_index = 0;