[vlc-devel] commit: wav: fix integer underflow ( Rémi Denis-Courmont )

[git version control]

vlc | branch: 0.8.6-bugfix | Rémi Denis-Courmont <rdenis at simphalempin.com> | Sat Jun 28 14:10:15 2008 +0300| [105335dd73917555335c03460aaa67fcdb9d4a55]

wav: fix integer underflow

> http://git.videolan.org/gitweb.cgi/vlc.git/?a=commit;h=105335dd73917555335c03460aaa67fcdb9d4a55
---

 modules/demux/wav.c |    4 +++-
 1 files changed, 3 insertions(+), 1 deletions(-)

diff --git a/modules/demux/wav.c b/modules/demux/wav.c
index 401a441..44b2715 100644
--- a/modules/demux/wav.c
+++ b/modules/demux/wav.c
@@ -176,7 +176,9 @@ static int Open( vlc_object_t * p_this )
     /* see the following link for more information:
      * http://www.microsoft.com/whdc/device/audio/multichaud.mspx#EFAA */
     if( GetWLE( &p_wf->wFormatTag ) == WAVE_FORMAT_EXTENSIBLE &&
-        i_size >= sizeof( WAVEFORMATEXTENSIBLE ) )
+        i_size >= sizeof( WAVEFORMATEXTENSIBLE ) &&
+        ( p_sys->fmt.i_extra + sizeof( WAVEFORMATEX )
+            >= sizeof( WAVEFORMATEXTENSIBLE ) ) )
     {
         unsigned i, i_channel_mask;
         GUID guid_subformat;