Fix infinite loop when parsing invalid EIT CRID data

diff --git a/src/epggrab/module/eit.c b/src/epggrab/module/eit.c
index e7cf7b5d40caef1a49eca4b01c74074f28850971..3bcb34d809de3fc4921e29784e67ac734d3c7844 100644 (file)
--- a/src/epggrab/module/eit.c
+++ b/src/epggrab/module/eit.c
@@ -478,8 +478,13 @@ static int _eit_desc_crid
       /* Next */
       len -= 1 + r;
       ptr += 1 + r;
+    } else {
+      break;
     }
   }
+  if (len > 3) {
+    return -1;
+  }
 
   return 0;
 }