diff options
| author | Gregory Maxwell <gmaxwell@cherenkov.myrandomnode.dyndns.org> | 2008-02-15 00:11:37 +0300 |
|---|---|---|
| committer | Jean-Marc Valin <jean-marc.valin@usherbrooke.ca> | 2008-02-15 00:18:12 +0300 |
| commit | 329638626afb9a12763f7caa003b6d3564d391bf (patch) | |
| tree | 8de0f3b30086f1c8c318a7b9c55459eb168c9944 /tools | |
| parent | 5170dbf3eeff96b105062bf5ef14199afb148f8b (diff) | |
Fix from speex svn 14504.
Diffstat (limited to 'tools')
| -rw-r--r-- | tools/celtdec.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/tools/celtdec.c b/tools/celtdec.c index 228aeaa..9e99116 100644 --- a/tools/celtdec.c +++ b/tools/celtdec.c @@ -104,7 +104,7 @@ static void print_comments(char *comments, int length) end = c+length; len=readint(c, 0); c+=4; - if (c+len>end) + if (len < 0 || c+len>end) { fprintf (stderr, "Invalid/corrupted comments\n"); return; @@ -128,7 +128,7 @@ static void print_comments(char *comments, int length) } len=readint(c, 0); c+=4; - if (c+len>end) + if (len < 0 || c+len>end) { fprintf (stderr, "Invalid/corrupted comments\n"); return; |