Fix de5da9c: better packet validation (again)

xiph · Jan 22, 2025 · fdcc470 · fdcc470
1 parent 584a00b
commit fdcc470
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/celt/celt_decoder.c b/celt/celt_decoder.c
@@ -1113,8 +1113,8 @@ int celt_decode_with_ec_dred(CELTDecoder * OPUS_RESTRICT st, const unsigned char
                len -= tmp;
                qext_bytes += tmp;
             } while (p==255);
-            if (len <= 0) return OPUS_INVALID_PACKET;
             qext_bytes--;
+            if (len <= 0 || qext_bytes<0) return OPUS_INVALID_PACKET;
             if (data[len] != 124<<1)
                qext_bytes=0;
             ec_dec_init(&ext_dec, (unsigned char*)data+len+1, qext_bytes);