avformat/mvdec: Fix DoS due to lack of eof check

Fixes: loop.mv

Michael Niedermayer committed 9 years ago

Commit 4f05e2e1 parent 96f24d11 file · +2 −0Browse files

Unified · Split

             uint32_t pos   = avio_rb32(pb);
             uint32_t asize = avio_rb32(pb);
             uint32_t vsize = avio_rb32(pb);
+            if (avio_feof(pb))
+                return AVERROR_INVALIDDATA;
             avio_skip(pb, 8);
             av_add_index_entry(ast, pos, timestamp, asize, 0, AVINDEX_KEYFRAME);
             av_add_index_entry(vst, pos + asize, i, vsize, 0, AVINDEX_KEYFRAME);

Keyboard shortcuts