History

avformat/mov: Check that sample_count is allocated in mov_parse_heif_items()

Fixes: NULL pointer dereference Fixes: 416811958/clusterfuzz-testcase-minimized-ffmpeg_dem_MOV_fuzzer-5425269114732544

Michael Niedermayer committed 1 year ago

Commit 0ffe97d1 parent 36c8eef1 file · +1 −1Browse files

Showing the changes to libavformat (1 of 1 file). Show all

Unified · Split

libavformat/mov.c+1−1
@@ -10341,7 +10341,7 @@ static int mov_parse_heif_items(AVFormatContext *s) · 10340 unmodified lines
10341 st->codecpar->height = item->height;10341 st->codecpar->height = item->height;
10342 10342
10343 err = sanity_checks(s, sc, item->item_id);10343 err = sanity_checks(s, sc, item->item_id);
10344 if (err)10344 if (err || !sc->sample_count)
10345 return AVERROR_INVALIDDATA;10345 return AVERROR_INVALIDDATA;
10346 10346
10347 sc->sample_sizes[0] = item->extent_length;10347 sc->sample_sizes[0] = item->extent_length;

Keyboard shortcuts

General

Show keyboard shortcuts
?
Focus the current search
/

Issues and pull requests

Open filters
f

Issues, pull requests and Inbox

Select next item
j↓
Select previous item
k↑
Open selected item
Enter
Dismiss filters or clear selection
Esc

Repository code

Go to file
t