...if we're going to verify against minimum legal blocksize, we really

ought to verify against maximum too.

svn path=/trunk/vorbis/; revision=13179

diff --git a/lib/info.c b/lib/info.c
index f6cf568..4e9dfe9 100644 (file)
--- a/lib/info.c
+++ b/lib/info.c
@@ -222,7 +222,8 @@ static int _vorbis_unpack_info(vorbis_info *vi,oggpack_buffer *opb){
   if(vi->channels<1)goto err_out;
   if(ci->blocksizes[0]<64)goto err_out; 
   if(ci->blocksizes[1]<ci->blocksizes[0])goto err_out;
-  
+  if(ci->blocksizes[1]>8192)goto err_out;
+
   if(oggpack_read(opb,1)!=1)goto err_out; /* EOP check */
 
   return(0);