return error if len is negative, prevent segfault

git-svn-id: file:///var/local/repositories/ffmpeg/trunk@13419 9553f0bf-9b14-0410-a0b8-cfaf0461ba5b

libavformat/ffmdec.c

@@ -89,6 +89,8 @@ static int ffm_read_data(AVFormatContext *s,
     while (size > 0) {
     redo:
         len = ffm->packet_end - ffm->packet_ptr;
+        if (len < 0)
+            return -1;
         if (len > size)
             len = size;
         if (len == 0) {