vorbis: fix panic on invalid encoding

Fixes #33
dhowden · Feb 7, 2018 · d449289 · d449289
1 parent 1582ebc
commit d449289
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/vorbis.go b/vorbis.go
@@ -29,6 +29,10 @@ func (m *metadataVorbis) readVorbisComment(r io.Reader) error {
 		return err
 	}
 
+	if vendorLen < 0 {
+		return fmt.Errorf("invalid encoding: expected positive length, got %d", vendorLen)
+	}
+
 	vendor, err := readString(r, vendorLen)
 	if err != nil {
 		return err