>From 10b32efc74f6e1795a02cfcf84fd0e82c5b1dcdc Mon Sep 17 00:00:00 2001 From: Andreas Cadhalpun Date: Sat, 11 Jul 2015 00:09:46 +0200 Subject: [PATCH] riffdec: prevent negative bit rate Signed-off-by: Andreas Cadhalpun --- libavformat/riffdec.c | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/libavformat/riffdec.c b/libavformat/riffdec.c index eebd8ed..b3f5d33 100644 --- a/libavformat/riffdec.c +++ b/libavformat/riffdec.c @@ -106,6 +106,14 @@ int ff_get_wav_header(AVIOContext *pb, AVCodecContext *codec, int size, int big_ codec->bit_rate = avio_rb32(pb) * 8; codec->block_align = avio_rb16(pb); } + if (codec->bit_rate < 0) { + av_log(NULL, AV_LOG_WARNING, + "Invalid bit rate: %d\n", codec->bit_rate); + if (codec->err_recognition & AV_EF_EXPLODE) + return AVERROR_INVALIDDATA; + else + codec->bit_rate = 0; + } if (size == 14) { /* We're dealing with plain vanilla WAVEFORMAT */ codec->bits_per_coded_sample = 8; } else { -- 2.1.4