faad: added length check before comparing "ADIF"

It's not valid to use the buffer's data without ensuring that the buffer contains enough data.

faad: added length check before comparing "ADIF"
8edd4079 · Max Kellermann · d75ce5c4 · 8edd4079
Commit 8edd4079 authored Feb 17, 2009 by Max Kellermann
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

faad_plugin.c src/decoder/faad_plugin.c +1 -1

No files found.
--- a/src/decoder/faad_plugin.c
+++ b/src/decoder/faad_plugin.c
@@ -217,7 +217,7 @@ faad_song_duration(struct faad_buffer *b, float *length)
 		b->consumed = 0;

 		faad_buffer_fill(b);
-	} else if (memcmp(b->data, "ADIF", 4) == 0) {
+	} else if (b->length >= 5 && memcmp(b->data, "ADIF", 4) == 0) {
 		unsigned bit_rate;
 		size_t skip_size = (b->data[4] & 0x80) ? 9 : 0;