avformat/mov: Check that sample_count is allocated in mov_parse_heif_items()

Fixes: NULL pointer dereference Fixes: 416811958/clusterfuzz-testcase-minimized-ffmpeg_dem_MOV_fuzzer-5425269114732544

Michael Niedermayer committed 1 year ago

Commit 0ffe97d1 parent 36c8eef1 file · +1 −1Browse files

Unified · Split

@@ -10341,7 +10341,7 @@ static int mov_parse_heif_items(AVFormatContext *s) · 10340 unmodified lines
10341	10341	st->codecpar->height = item->height;
10342	10342
10343	10343	err = sanity_checks(s, sc, item->item_id);
10344		− if (err)
	10344	+ if (err \|\| !sc->sample_count)
10345	10345	return AVERROR_INVALIDDATA;
10346	10346
10347	10347	sc->sample_sizes[0] = item->extent_length;

Keyboard shortcuts