Commit b7702faf authored by Carl Eugen Hoyos's avatar Carl Eugen Hoyos

Avoid a possible overflow when reading Nikon avi files.

Suggested-by: Reimar
parent 9b78abae
......@@ -350,8 +350,7 @@ static void avi_read_nikon(AVFormatContext *s, uint64_t end)
uint16_t size = avio_rl16(s->pb);
const char *name = NULL;
char buffer[64] = { 0 };
if (avio_tell(s->pb) + size > tag_end)
size = tag_end - avio_tell(s->pb);
size = FFMIN(size, tag_end - avio_tell(s->pb));
size -= avio_read(s->pb, buffer,
FFMIN(size, sizeof(buffer) - 1));
switch (tag) {
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment