CVE-2014-9495

(cherry picked from commit ed62e5b38363e6ecbf9c234c37510bf87db5c3c4)
Signed-off-by: Jean-Baptiste Kempf <jb@videolan.org>