From e6923f683c506cbb581eb7f31288801f1a065fb0 Mon Sep 17 00:00:00 2001 From: Justin Ruggles Date: Thu, 22 Sep 2011 13:09:05 -0400 Subject: [PATCH] tta: check output buffer size after adjusting frame length for last frame --- libavcodec/tta.c | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/libavcodec/tta.c b/libavcodec/tta.c index 74d0d46..b77034c 100644 --- a/libavcodec/tta.c +++ b/libavcodec/tta.c @@ -285,15 +285,16 @@ static int tta_decode_frame(AVCodecContext *avctx, int cur_chan = 0, framelen = s->frame_length; int32_t *p; - if (*data_size < (framelen * s->channels * 2)) { - av_log(avctx, AV_LOG_ERROR, "Output buffer size is too small.\n"); - return -1; - } // FIXME: seeking s->total_frames--; if (!s->total_frames && s->last_frame_length) framelen = s->last_frame_length; + if (*data_size < (framelen * s->channels * 2)) { + av_log(avctx, AV_LOG_ERROR, "Output buffer size is too small.\n"); + return -1; + } + // init per channel states for (i = 0; i < s->channels; i++) { s->ch_ctx[i].predictor = 0; -- 2.7.4