From c1acd58198187b9d0ca9386add4c10fca33d2c21 Mon Sep 17 00:00:00 2001
From: Michael Niedermayer <michaelni@gmx.at>
Date: Tue, 20 Dec 2011 18:00:30 +0100
Subject: [PATCH] roq: fix excessive memory alloc Fixes Ticket802 Bug found by:
 Oana Stratulat

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
---
 libavformat/idroqdec.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/libavformat/idroqdec.c b/libavformat/idroqdec.c
index eb11c69adb..9ac32eb668 100644
--- a/libavformat/idroqdec.c
+++ b/libavformat/idroqdec.c
@@ -30,6 +30,7 @@
 #include "libavutil/intreadwrite.h"
 #include "avformat.h"
 #include "internal.h"
+#include "avio_internal.h"
 
 #define RoQ_MAGIC_NUMBER 0x1084
 #define RoQ_CHUNK_PREAMBLE_SIZE 8
@@ -125,6 +126,8 @@ static int roq_read_packet(AVFormatContext *s,
         if(chunk_size > INT_MAX)
             return AVERROR_INVALIDDATA;
 
+        chunk_size = ffio_limit(pb, chunk_size);
+
         switch (chunk_type) {
 
         case RoQ_INFO: