History

avformat/mov: disallow a zero sample size in trun atoms

In order to not generate 0 sized packets or create a huge index table needlessly. Fixes: Timeout Fixes: 43717/clusterfuzz-testcase-minimized-ffmpeg_IO_DEMUXER_fuzzer-5206008287330304 Fixes: 45738/clusterfuzz-testcase-minimized-ffmpeg_IO_DEMUXER_fuzzer-6142535657979904

Marton Balint committed 4 years ago

Commit 03d81a01 parent 7acc1241 file · +2 −0Browse files

Showing the changes to libavformat (1 of 1 file). Show all

Unified · Split

libavformat/mov.c+2−0
@@ -5179,6 +5179,8 @@ static int mov_read_trun(MOVContext *c, AVIOContext *pb, MOVAtom atom) · 5178 unmodified lines
5179 distance++;5179 distance++;
5180 if (av_sat_add64(dts, sample_duration) != dts + (uint64_t)sample_duration)5180 if (av_sat_add64(dts, sample_duration) != dts + (uint64_t)sample_duration)
5181 return AVERROR_INVALIDDATA;5181 return AVERROR_INVALIDDATA;
5182 if (!sample_size)
5183 return AVERROR_INVALIDDATA;
5182 dts += sample_duration;5184 dts += sample_duration;
5183 offset += sample_size;5185 offset += sample_size;
5184 sc->data_size += sample_size;5186 sc->data_size += sample_size;

Keyboard shortcuts

General

Show keyboard shortcuts
?
Focus the current search
/

Issues and pull requests

Open filters
f

Issues, pull requests and Inbox

Select next item
j↓
Select previous item
k↑
Open selected item
Enter
Dismiss filters or clear selection
Esc

Repository code

Go to file
t