avformat/mpc: attempt to allocate a packet that is not smaller than the data inside it
authorMichael Niedermayer <michaelni@gmx.at>
Sat, 14 Jun 2014 22:49:02 +0000 (00:49 +0200)
committerMichael Niedermayer <michaelni@gmx.at>
Sat, 14 Jun 2014 23:33:17 +0000 (01:33 +0200)
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
libavformat/mpc.c

index c3faebe..8f8ac9c 100644 (file)
@@ -152,7 +152,7 @@ static int mpc_read_packet(AVFormatContext *s, AVPacket *pkt)
     }
     c->curbits = (curbits + size2) & 0x1F;
 
-    if ((ret = av_new_packet(pkt, size)) < 0)
+    if ((ret = av_new_packet(pkt, size + 4)) < 0)
         return ret;
 
     pkt->data[0] = curbits;