From 6df04eae8592dab4e834c5a84a46acad2c636dbd Mon Sep 17 00:00:00 2001
From: mosu <mosu@b3059339-0415-0410-9bf9-f77b7e298cf2>
Date: Sat, 20 Sep 2003 10:10:11 +0000
Subject: [PATCH] Fix for borked .mov files with bogus user data length values.
 Patch by Marek Zelem.

git-svn-id: svn://svn.mplayerhq.hu/mplayer/trunk@10889 b3059339-0415-0410-9bf9-f77b7e298cf2
---
 libmpdemux/demux_mov.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/libmpdemux/demux_mov.c b/libmpdemux/demux_mov.c
index 567471fb8c..cd3513a976 100644
--- a/libmpdemux/demux_mov.c
+++ b/libmpdemux/demux_mov.c
@@ -1455,9 +1455,13 @@ static void lschunks(demuxer_t* demuxer,int level,off_t endpos,mov_track_t* trak
 		    case MOV_FOURCC('A','l','l','F'):
 		    default:
 		    {
+			if( udta_len>udta_size)
+				udta_len=udta_size;
+			{
 			char dump[udta_len-4];
 			stream_read(demuxer->stream, (char *)&dump, udta_len-4-4);
 			udta_size -= udta_len;
+			}
 		    }
 		}
 	    }