size < 4 is invalid

Originally committed as revision 16829 to svn://svn.ffmpeg.org/ffmpeg/trunk

diff --git a/libavformat/4xm.c b/libavformat/4xm.c
index c792a77..af57c6c 100644 (file)
--- a/libavformat/4xm.c
+++ b/libavformat/4xm.c
@@ -114,7 +114,7 @@ static int fourxm_read_header(AVFormatContext *s,
     /* check for LIST-HEAD */
     GET_LIST_HEADER();
     header_size = size - 4;
-    if (fourcc_tag != HEAD_TAG)
+    if (fourcc_tag != HEAD_TAG || size < 4)
         return AVERROR_INVALIDDATA;
 
     /* allocate space for the header and load the whole thing */