ref: 5e50f1f9a3a488445e76a4a9f00f3cc74fbe8cdf
parent: 096f5d3769e3fffb8963cb05f6d190e7bd0da63d
author: Jean-Marc Valin <[email protected]>
date: Wed Jul 6 17:41:12 EDT 2016
Check for len<1 in opus_packet_parse_impl() Rather than read invalid memory
--- a/src/opus.c
+++ b/src/opus.c
@@ -201,7 +201,7 @@
opus_int32 pad = 0;
const unsigned char *data0 = data;
- if (size==NULL)
+ if (size==NULL || len<1)
return OPUS_BAD_ARG;
framesize = opus_packet_get_samples_per_frame(data, 48000);