Commit 62b6498d authored by Baptiste Coudurier's avatar Baptiste Coudurier

break if atom size is more than size left in container atom, fix shooter.mov

Originally committed as revision 8544 to svn://svn.ffmpeg.org/ffmpeg/trunk
parent db56acd4
...@@ -250,7 +250,7 @@ static int mov_read_default(MOVContext *c, ByteIOContext *pb, MOV_atom_t atom) ...@@ -250,7 +250,7 @@ static int mov_read_default(MOVContext *c, ByteIOContext *pb, MOV_atom_t atom)
a.size -= 8; a.size -= 8;
if(a.size < 0) if(a.size < 0 || a.size > atom.size - total_size)
break; break;
if (c->parse_table[i].type == 0) { /* skip leaf atoms data */ if (c->parse_table[i].type == 0) { /* skip leaf atoms data */
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment