Do not decode more data than output buffer may hold

git-svn-id: file:///var/local/repositories/ffmpeg/trunk@10547 9553f0bf-9b14-0410-a0b8-cfaf0461ba5b

libavcodec/dsicinav.c

@@ -317,6 +317,8 @@ static int cinaudio_decode_frame(AVCodecContext *avctx,
     uint8_t *src = buf;
     int16_t *samples = (int16_t *)data;
 
+    buf_size = FFMIN(buf_size, *data_size/2);
+
     if (cin->initial_decode_frame) {
         cin->initial_decode_frame = 0;
         cin->delta = (int16_t)AV_RL16(src); src += 2;