fix GHSA-whqp-q38m-3vg8 opus channel check

ireader · May 8, 2022 · 44ac161 · 44ac161
1 parent 9a22da8
commit 44ac161
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/libflv/source/opus-head.c b/libflv/source/opus-head.c
@@ -82,7 +82,8 @@ int opus_head_load(const uint8_t* data, size_t bytes, struct opus_head_t* opus)
         bytes -= 8;
     }
 
-    if (bytes < 11)
+    // check channels: [1, 8]
+    if (bytes < 11 || data[1] > 8 || data[1] < 1)
         return -1;
 
     memset(opus, 0, sizeof(*opus));