Skip to content
Snippets Groups Projects
Commit 4d18f4c1 authored by Piotr Bandurski's avatar Piotr Bandurski Committed by Michael Niedermayer
Browse files

id3v2: reject APICs with size of 0


fixes ticket #1324

Signed-off-by: default avatarMichael Niedermayer <michaelni@gmx.at>
parent cb7b0f35
No related branches found
No related tags found
No related merge requests found
...@@ -488,7 +488,7 @@ static void read_apic(AVFormatContext *s, AVIOContext *pb, int taglen, char *tag ...@@ -488,7 +488,7 @@ static void read_apic(AVFormatContext *s, AVIOContext *pb, int taglen, char *tag
apic->len = taglen; apic->len = taglen;
apic->data = av_malloc(taglen); apic->data = av_malloc(taglen);
if (!apic->data || avio_read(pb, apic->data, taglen) != taglen) if (!apic->data || !apic->len || avio_read(pb, apic->data, taglen) != taglen)
goto fail; goto fail;
new_extra->tag = "APIC"; new_extra->tag = "APIC";
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment