avformat/oggparsespeex: Check frames_per_packet and packet_size
authorMichael Niedermayer <michael@niedermayer.cc>
Sat, 3 Dec 2016 02:40:55 +0000 (03:40 +0100)
committerMichael Niedermayer <michael@niedermayer.cc>
Mon, 5 Dec 2016 17:29:12 +0000 (18:29 +0100)
commitc2e4ced78e61679a74683f1c5f3b7e1d4b27102a
tree79c45e2b164c144f4ee5632527859cb4c84a6f42
parentcc27b8e09face7bbc14aa6865d24261f56712f57
avformat/oggparsespeex: Check frames_per_packet and packet_size

The speex specification does not seem to restrict these values, thus
the limits where choosen so as to avoid multiplicative overflow

Fixes undefined behavior
Fixes: 635422.ogg

Found-by: Matt Wolenetz <wolenetz@google.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit afcf15b0dbb4b6429be5083e50b296cdca61875e)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
libavformat/oggparsespeex.c