Fix heap buffer overflow

Change-Id: I3fb0f4762c979a54f2d990f3696c4f66f2383383
Signed-off-by: Minje Ahn <minje.ahn@samsung.com>

diff --git a/formats/ffmpeg/mm_file_format_midi.c b/formats/ffmpeg/mm_file_format_midi.c
index 06e9e55..e9a170a 100755 (executable)
--- a/formats/ffmpeg/mm_file_format_midi.c
+++ b/formats/ffmpeg/mm_file_format_midi.c
@@ -787,13 +787,13 @@ static void __AvGetMidiDuration(char *szFileName, MIDI_INFO_SIMPLE *info)
        }
 
        /*check format*/
-       if (!(memcmp(pbFile, MMFILE_XMF_100, 8)) ||
+       if (dFileSize >= 8 && (!(memcmp(pbFile, MMFILE_XMF_100, 8)) ||
                !(memcmp(pbFile, MMFILE_XMF_101, 8)) ||
-               !(memcmp(pbFile, MMFILE_MXMF_200, 8))) {
+               !(memcmp(pbFile, MMFILE_MXMF_200, 8)))) {
 
                is_xmf = 1;
                codecType = AV_DEC_AUDIO_XMF;
-       } else if (!(memcmp(pbFile, MMFILE_RMF, 4))) {
+       } else if (dFileSize >= 4 && !(memcmp(pbFile, MMFILE_RMF, 4))) {
                is_xmf = 0;
                codecType = AV_DEC_AUDIO_RMF;
        } else {