Adapted from
http://src.chromium.org/viewvc/chrome/trunk/deps/third_party/ffmpeg/patches/to_upstream/42_aac_zero_bands.patch?revision=25254&view=markup&pathrev=26428
--- libavcodec/aac.c~	2010-04-25 10:58:02.000000000 +0000
+++ libavcodec/aac.c	2011-04-01 15:55:28.252276001 +0000
@@ -718,9 +718,9 @@ static int decode_band_types(AACContext
                 av_log(ac->avccontext, AV_LOG_ERROR, overread_err);
                 return -1;
             }
-            if (sect_end > ics->max_sfb) {
+            if (sect_end > ics->max_sfb || sect_end == 0) {
                 av_log(ac->avccontext, AV_LOG_ERROR,
-                       "Number of bands (%d) exceeds limit (%d).\n",
+                       "Number of bands (%d) is invalid, limit (%d).\n",
                        sect_end, ics->max_sfb);
                 return -1;
             }