Fixes ticket #11475.
Unified · Split
| @@ -733,6 +733,12 @@ static int audio_element_obu(void *s, IAMFContext *c, AVIOContext *pb, int len) · 732 unmodified lines | ||
| 733 | 733 | } |
| 734 | 734 | |
| 735 | 735 | num_parameters = ffio_read_leb(pbc); |
| 736 | + if (num_parameters > 2 && audio_element_type == 0) { | |
| 737 | + av_log(s, AV_LOG_ERROR, "Audio Element parameter count %u is invalid" | |
| 738 | + " for Channel representations\n", num_parameters); | |
| 739 | + ret = AVERROR_INVALIDDATA; | |
| 740 | + goto fail; | |
| 741 | + } | |
| 736 | 742 | if (num_parameters && audio_element_type != 0) { |
| 737 | 743 | av_log(s, AV_LOG_ERROR, "Audio Element parameter count %u is invalid" |
| 738 | 744 | " for Scene representations\n", num_parameters); |