Commit af7562a0 authored by Carl Eugen Hoyos's avatar Carl Eugen Hoyos

Ignore es_map_length when parsing mpeg program stream map.

Fixes ticket #3195.
parent e2bf00ce
...@@ -193,6 +193,8 @@ static long mpegps_psm_parse(MpegDemuxContext *m, AVIOContext *pb) ...@@ -193,6 +193,8 @@ static long mpegps_psm_parse(MpegDemuxContext *m, AVIOContext *pb)
/* skip program_stream_info */ /* skip program_stream_info */
avio_skip(pb, ps_info_length); avio_skip(pb, ps_info_length);
es_map_length = avio_rb16(pb); es_map_length = avio_rb16(pb);
/* Ignore es_map_length, trust psm_length */
es_map_length = psm_length - ps_info_length - 10;
/* at least one es available? */ /* at least one es available? */
while (es_map_length >= 4){ while (es_map_length >= 4){
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment