[vlc-commits] xiph: set limit to chapters.

[Francois Cartegnie]

vlc | branch: master | Francois Cartegnie <fcvlcdev at free.fr> | Tue Sep 17 10:17:59 2013 +0200| [1a5cb04ebc82c1430f2265adcfb904059124cae5] | committer: Francois Cartegnie

xiph: set limit to chapters.

Limits memory size allocation that could have been triggered by
a file, due to chapters array for reordering.

> http://git.videolan.org/gitweb.cgi/vlc.git/?a=commit;h=1a5cb04ebc82c1430f2265adcfb904059124cae5
---

 modules/demux/xiph_metadata.c |    1 +
 1 file changed, 1 insertion(+)

diff --git a/modules/demux/xiph_metadata.c b/modules/demux/xiph_metadata.c
index ddb3631..a88b9b8 100644
--- a/modules/demux/xiph_metadata.c
+++ b/modules/demux/xiph_metadata.c
@@ -120,6 +120,7 @@ typedef struct chapters_array_t
 
 static seekpoint_t * getChapterEntry( unsigned int i_index, chapters_array_t *p_array )
 {
+    if ( i_index > 4096 ) return NULL;
     if ( i_index >= p_array->i_size )
     {
         unsigned int i_newsize = p_array->i_size;