brstm: make sure an ADPC chunk was read for adpcm_thp
authorAndreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
Mon, 4 Jan 2016 11:57:38 +0000 (12:57 +0100)
committerAndreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
Wed, 27 Jan 2016 22:45:44 +0000 (23:45 +0100)
This fixes NULL pointer dereferencing.

Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
(cherry picked from commit d7d37c479fa71639650751648275615e979beb33)
Signed-off-by: Andreas Cadhalpun <Andreas.Cadhalpun@googlemail.com>
libavformat/brstm.c

index 6eae9d9..7cb1341 100644 (file)
@@ -389,6 +389,11 @@ static int read_packet(AVFormatContext *s, AVPacket *pkt)
         codec->codec_id == AV_CODEC_ID_ADPCM_THP_LE) {
         uint8_t *dst;
 
+        if (!b->adpc) {
+            av_log(s, AV_LOG_ERROR, "adpcm_thp requires ADPC chunk, but none was found.\n");
+            return AVERROR_INVALIDDATA;
+        }
+
         if (size > (INT_MAX - 32 - 4) ||
             (32 + 4 + size) > (INT_MAX / codec->channels) ||
             (32 + 4 + size) * codec->channels > INT_MAX - 8)