shithub: libtags

Info  •  Files  •  Log  •  Branches

wav: validate value size as well

--- a/wav.c

+++ b/wav.c

@@ -47,7 +47,7 @@

 			break;

 		sz -= 4+4;

 		csz = leuint(d+4);

-		if(sz < csz)

+		if(sz < csz || csz < 0)

 			break;

 		sz -= csz;