shithub: mp3dec

Info  •  Files  •  Log  •  Branches

range check fix

--- a/minimp3.c

+++ b/minimp3.c

@@ -1552,7 +1552,7 @@

     bs_t bs_frame[1];

     mp3dec_scratch_t scratch;

-    if (dec->header[0] == 0xff && hdr_compare(dec->header, mp3))

+    if (mp3_bytes > 4 && dec->header[0] == 0xff && hdr_compare(dec->header, mp3))

     {

         frame_size = hdr_frame_bytes(mp3, dec->free_format_bytes) + hdr_padding(mp3);

         if (frame_size != mp3_bytes && (frame_size + HDR_SIZE > mp3_bytes || !hdr_compare(mp3, mp3 + frame_size)))