diff --git a/libavcodec/ra144.c b/libavcodec/ra144.c index fc99655e80a72d3b7124154ea9f5ccaac8e1ed85..649dfac33e8db6430aed0cb5f2f27c2b13d5884e 100644 --- a/libavcodec/ra144.c +++ b/libavcodec/ra144.c @@ -315,6 +315,9 @@ static int ra144_decode_frame(AVCodecContext * avctx, void *vdata, RA144Context *ractx = avctx->priv_data; GetBitContext gb; + if (*data_size < 2*160) + return -1; + if(buf_size < 20) { av_log(avctx, AV_LOG_ERROR, "Frame too small (%d bytes). Truncated file?\n", buf_size);