Commit f509c950 authored by Michael Niedermayer's avatar Michael Niedermayer

Merge commit '40662728'

* commit '40662728':
  asfdec: do not read replicated data when their length is 0
Merged-by: 's avatarMichael Niedermayer <michael@niedermayer.cc>
parents 54882156 40662728
...@@ -1123,17 +1123,19 @@ static int asf_read_multiple_payload(AVFormatContext *s, AVPacket *pkt, ...@@ -1123,17 +1123,19 @@ static int asf_read_multiple_payload(AVFormatContext *s, AVPacket *pkt,
if ((ret = asf_read_subpayload(s, pkt, 1)) < 0) if ((ret = asf_read_subpayload(s, pkt, 1)) < 0)
return ret; return ret;
} else { } else {
if (!asf_pkt->data_size) { if (asf->rep_data_len) {
asf_pkt->data_size = asf_pkt->size_left = avio_rl32(pb); // read media object size if (!asf_pkt->data_size) {
if (asf_pkt->data_size <= 0) asf_pkt->data_size = asf_pkt->size_left = avio_rl32(pb); // read media object size
return AVERROR_EOF; if (asf_pkt->data_size <= 0)
if ((ret = av_new_packet(&asf_pkt->avpkt, asf_pkt->data_size)) < 0) return AVERROR_EOF;
return ret; if ((ret = av_new_packet(&asf_pkt->avpkt, asf_pkt->data_size)) < 0)
} else return ret;
avio_skip(pb, 4); // reading of media object size is already done } else
asf_pkt->dts = avio_rl32(pb); // read presentation time avio_skip(pb, 4); // reading of media object size is already done
if ((asf->rep_data_len - 8) > 0) asf_pkt->dts = avio_rl32(pb); // read presentation time
avio_skip(pb, asf->rep_data_len - 8); // skip replicated data if (asf->rep_data_len && ((asf->rep_data_len - 8) > 0))
avio_skip(pb, asf->rep_data_len - 8); // skip replicated data
}
pay_len = avio_rl16(pb); // payload length should be WORD pay_len = avio_rl16(pb); // payload length should be WORD
if (pay_len > asf->packet_size) { if (pay_len > asf->packet_size) {
av_log(s, AV_LOG_ERROR, av_log(s, AV_LOG_ERROR,
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment