Commit 1c010fd0 authored by Michael Niedermayer's avatar Michael Niedermayer

avformat/mxfdec: detect loops during header parsing

The header parser uses forward and backward parsing, making the
bulletproof prevention of loops difficult, thus this simple
detection code.
If someone improves the forward/backward parsing so it cannot loop
then this commit should be reverted

Fixes Ticket3278
Signed-off-by: 's avatarMichael Niedermayer <michaelni@gmx.at>
parent 94cf4f8b
...@@ -2011,6 +2011,8 @@ static int mxf_read_header(AVFormatContext *s) ...@@ -2011,6 +2011,8 @@ static int mxf_read_header(AVFormatContext *s)
MXFContext *mxf = s->priv_data; MXFContext *mxf = s->priv_data;
KLVPacket klv; KLVPacket klv;
int64_t essence_offset = 0; int64_t essence_offset = 0;
int64_t last_pos = -1;
uint64_t last_pos_index = 1;
int ret; int ret;
mxf->last_forward_tell = INT64_MAX; mxf->last_forward_tell = INT64_MAX;
...@@ -2028,7 +2030,12 @@ static int mxf_read_header(AVFormatContext *s) ...@@ -2028,7 +2030,12 @@ static int mxf_read_header(AVFormatContext *s)
while (!url_feof(s->pb)) { while (!url_feof(s->pb)) {
const MXFMetadataReadTableEntry *metadata; const MXFMetadataReadTableEntry *metadata;
if (avio_tell(s->pb) == last_pos) {
av_log(mxf->fc, AV_LOG_ERROR, "MXF structure loop detected\n");
return AVERROR_INVALIDDATA;
}
if ((1ULL<<61) % last_pos_index++ == 0)
last_pos = avio_tell(s->pb);
if (klv_read_packet(&klv, s->pb) < 0) { if (klv_read_packet(&klv, s->pb) < 0) {
/* EOF - seek to previous partition or stop */ /* EOF - seek to previous partition or stop */
if(mxf_parse_handle_partition_or_eof(mxf) <= 0) if(mxf_parse_handle_partition_or_eof(mxf) <= 0)
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment