Commit 32963862 authored by Gregory Maxwell's avatar Gregory Maxwell Committed by Jean-Marc Valin
Browse files

Fix from speex svn 14504.

parent 5170dbf3
......@@ -104,7 +104,7 @@ static void print_comments(char *comments, int length)
end = c+length;
len=readint(c, 0);
c+=4;
if (c+len>end)
if (len < 0 || c+len>end)
{
fprintf (stderr, "Invalid/corrupted comments\n");
return;
......@@ -128,7 +128,7 @@ static void print_comments(char *comments, int length)
}
len=readint(c, 0);
c+=4;
if (c+len>end)
if (len < 0 || c+len>end)
{
fprintf (stderr, "Invalid/corrupted comments\n");
return;
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment