movdec: Avoid av_malloc(0) in stss

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind

movdec: Avoid av_malloc(0) in stss
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
29a20ac4 · Alex Converse · 58fc7400 · 29a20ac4
Commit 29a20ac4 authored Feb 03, 2012 by Alex Converse
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 0 deletions

mov.c libavformat/mov.c +2 -0

No files found.
--- a/libavformat/mov.c
+++ b/libavformat/mov.c
@@ -1529,6 +1529,8 @@ static int mov_read_stss(MOVContext *c, AVIOContext *pb, MOVAtom atom)

    av_dlog(c->fc, "keyframe_count = %d\n", entries);

+    if (!entries)
+        return 0;
    if (entries >= UINT_MAX / sizeof(int))
        return AVERROR_INVALIDDATA;
    sc->keyframes = av_malloc(entries * sizeof(int));