[FFmpeg-devel] [PATCH] Check for buffer overflow in DSI .CIN audio

[Kostya]

$subj
-------------- next part --------------
Index: libavcodec/dsicinav.c
===================================================================
--- libavcodec/dsicinav.c	(revision 10505)
+++ libavcodec/dsicinav.c	(working copy)
@@ -317,6 +317,8 @@
     uint8_t *src = buf;
     int16_t *samples = (int16_t *)data;
 
+    buf_size = FFMIN(buf_size, *data_size/2);
+
     if (cin->initial_decode_frame) {
         cin->initial_decode_frame = 0;
         cin->delta = (int16_t)AV_RL16(src); src += 2;