[FFmpeg-devel] [PATCH v4 7/9] avformat/wavdec: fix s337m/spdif probing beyond data_end

[Nicolas Gaullier]

---
 libavformat/wavdec.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libavformat/wavdec.c b/libavformat/wavdec.c
index 5b287680e2..9f48ff067b 100644
--- a/libavformat/wavdec.c
+++ b/libavformat/wavdec.c
@@ -80,7 +80,7 @@ static void set_spdif_s337m(AVFormatContext *s, WAVDemuxContext *wav)
                 ret = AVERROR(ENOMEM);
             } else {
                 int64_t pos = avio_tell(s->pb);
-                len = ret = avio_read(s->pb, buf, len);
+                len = ret = avio_read(s->pb, buf, FFMIN(len, wav->data_end - pos));
                 if (len >= 0) {
                     if (CONFIG_SPDIF_DEMUXER) {
                         ret = ff_spdif_probe(buf, len, &codec);
-- 
2.27.0.windows.1