Commit cc5e5548 authored by Michael Niedermayer's avatar Michael Niedermayer

avformat/wtvdec: Check pointer before use

Fixes out of array read
Fixes: 049fdf78565f1ce5665df236d90f8657/asan_heap-oob_10a5a97_1026_42f9d4855547329560f385768de2f3fb.wtv

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: 's avatarMichael Niedermayer <michael@niedermayer.cc>
parent 67318187
...@@ -1031,7 +1031,7 @@ static int read_header(AVFormatContext *s) ...@@ -1031,7 +1031,7 @@ static int read_header(AVFormatContext *s)
while (1) { while (1) {
uint64_t frame_nb = avio_rl64(pb); uint64_t frame_nb = avio_rl64(pb);
uint64_t position = avio_rl64(pb); uint64_t position = avio_rl64(pb);
while (frame_nb > e->size && e <= e_end) { while (e <= e_end && frame_nb > e->size) {
e->pos = last_position; e->pos = last_position;
e++; e++;
} }
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment