X-Git-Url: https://git.xonotic.org/?a=blobdiff_plain;f=snd_wav.c;h=b55c36653358524b8dd636f341323c92dfeb41a8;hb=57d7496c097df506f385c4a301173e7576c987c7;hp=7eb118d7a1c2b64563c037dba1f8282d59f1d13a;hpb=0f80ff51ff9f369233d17b3377d3a0d34b4c8e5a;p=xonotic%2Fdarkplaces.git

diff --git a/snd_wav.c b/snd_wav.c
index 7eb118d7..b55c3665 100644
--- a/snd_wav.c
+++ b/snd_wav.c
@@ -84,6 +84,12 @@ static void FindNextChunk(const char *name)
 			data_p = NULL;
 			return;
 		}
+		if (data_p + iff_chunk_len > iff_end)
+		{
+			// truncated chunk!
+			data_p = NULL;
+			return;
+		}
 		data_p -= 8;
 		last_chunk = data_p + 8 + ( (iff_chunk_len + 1) & ~1 );
 		if (!strncmp((const char *)data_p, name, 4))