riff: prevent crash if rounded up tag size exceeds data size
authorRené Stadler <mail@renestadler.de>
Fri, 26 Jun 2009 21:50:54 +0000 (00:50 +0300)
committerRené Stadler <mail@renestadler.de>
Fri, 26 Jun 2009 22:22:52 +0000 (01:22 +0300)
commit41b7504e9ce7725a83a23a67de61fa73ceb73b28
tree03a1e8ed90cfac2f40b75333d3ffb3c4c32c2e23
parent939baee2bdc12994f5b13d27bce73ff98a4cb3d0
riff: prevent crash if rounded up tag size exceeds data size

When rounding up `tsize' exceeds the remaining buffer size, `size' underflows
and an invalid read past the buffer data follows.
gst-libs/gst/riff/riff-read.c