Skip to content

F
ffmpeg.wasm-core
Commit e2b8b4ca authored by Benoit Fouet's avatar Benoit Fouet Committed by Michael Niedermayer
Browse files
Options

avformat/apngdec: validate frame dimensions. 

Signed-off-by: 's avatarMichael Niedermayer <michaelni@gmx.at>
parent 345cfd04
Hide whitespace changes
Inline Side-by-side
Showing with 5 additions and 1 deletion
libavformat/apngdec.c
View file @ e2b8b4ca
......@@ -301,7 +301,11 @@ static int decode_fctl_chunk(AVFormatContext *s, APNGDemuxContext *ctx, AVPacket
height != s->streams[0]->codec->height ||
x_offset != 0 ||
y_offset != 0) {
if (sequence_number == 0)
if (sequence_number == 0 ||
x_offset >= s->streams[0]->codec->width ||
width > s->streams[0]->codec->width - x_offset ||
y_offset >= s->streams[0]->codec->height ||
height > s->streams[0]->codec->height - y_offset)
return AVERROR_INVALIDDATA;
ctx->is_key_frame = 0;
} else {
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment