Commit cd929923 authored by Rémi Denis-Courmont's avatar Rémi Denis-Courmont

XSPF: fix realloc() integer overflow

parent bba95f3f
......@@ -427,7 +427,8 @@ static bool parse_track_node COMPLEX_INTERFACE
else
free( psz_uri );
if( p_sys->i_track_id < 0 )
if( p_sys->i_track_id < 0
|| p_sys->i_track_id >= (SIZE_MAX / sizeof(p_new_input)) )
{
input_item_node_AppendNode( p_input_node, p_new_node );
vlc_gc_decref( p_new_input );
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment