Index: qtdemux.c
===================================================================
RCS file: /home/cvs/gstreamer/gst-plugins/gst/qtdemux/qtdemux.c,v
retrieving revision 1.68
diff -u -r1.68 qtdemux.c
--- qtdemux.c	15 Oct 2004 09:19:37 -0000	1.68
+++ qtdemux.c	2 Nov 2004 09:18:24 -0000
@@ -1301,6 +1301,8 @@
           len = QTDEMUX_GUINT32_GET (buf);
           if (len == 0)
             break;
+          if (len > (int) (end - buf))
+            len = (int) (end - buf);
 
           child = g_node_new (buf);
           g_node_append (node, child);
