From a5685be502e510d97c950f1cac8043c7ce1f5ecf Mon Sep 17 00:00:00 2001
From: Baptiste Coudurier <baptiste.coudurier@gmail.com>
Date: Wed, 27 May 2009 00:46:20 +0000
Subject: [PATCH] check that len is not negative
Originally committed as revision 18961 to svn://svn.ffmpeg.org/ffmpeg/trunk
---
libavformat/mpegts.c | 2 ++
1 file changed, 2 insertions(+)
diff --git a/libavformat/mpegts.c b/libavformat/mpegts.c
index 3b3835950c7..244b9ed4c2c 100644
--- a/libavformat/mpegts.c
+++ b/libavformat/mpegts.c
@@ -892,6 +892,8 @@ static void mpegts_push_data(MpegTSFilter *filter,
/* PES packing parsing */
case MPEGTS_PESHEADER_FILL:
len = pes->pes_header_size - pes->data_index;
+ if (len < 0)
+ return
if (len > buf_size)
len = buf_size;
memcpy(pes->header + pes->data_index, p, len);
--
GitLab