Commit ccb6b056 authored by Michael Niedermayer's avatar Michael Niedermayer

Merge commit '640a2427'

* commit '640a2427':
  bfi: Add some very basic sanity checks for input packet sizes
Merged-by: 's avatarMichael Niedermayer <michaelni@gmx.at>
parents a6b79bb2 640a2427
...@@ -136,6 +136,10 @@ static int bfi_read_packet(AVFormatContext * s, AVPacket * pkt) ...@@ -136,6 +136,10 @@ static int bfi_read_packet(AVFormatContext * s, AVPacket * pkt)
video_offset = avio_rl32(pb); video_offset = avio_rl32(pb);
audio_size = video_offset - audio_offset; audio_size = video_offset - audio_offset;
bfi->video_size = chunk_size - video_offset; bfi->video_size = chunk_size - video_offset;
if (audio_size < 0 || bfi->video_size < 0) {
av_log(s, AV_LOG_ERROR, "Invalid audio/video offsets or chunk size\n");
return AVERROR_INVALIDDATA;
}
//Tossing an audio packet at the audio decoder. //Tossing an audio packet at the audio decoder.
ret = av_get_packet(pb, pkt, audio_size); ret = av_get_packet(pb, pkt, audio_size);
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment