mpc8: Check the seek table size parsed from the bitstream
authorMartin Storsjö <martin@martin.st>
Wed, 11 Sep 2013 19:47:06 +0000 (22:47 +0300)
committerMartin Storsjö <martin@martin.st>
Thu, 12 Sep 2013 07:54:05 +0000 (10:54 +0300)
commit459f2b393a3f89ed08d10fbceb4738d1429f268e
treeb8b6dac8c463b3365e60207e8bb9ed3298b447ab
parent0d61f260010707f3028b818e8b24598e1a83d696
mpc8: Check the seek table size parsed from the bitstream

Limit the size to INT_MAX/2 (for simplicity) to be sure that
size + FF_INPUT_BUFFER_PADDING_SIZE won't overflow.

Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
CC: libav-stable@libav.org
Signed-off-by: Martin Storsjö <martin@martin.st>
libavformat/mpc8.c