avformat/ipmovie: Check signature_buffer read

Fixes: use of uninitilaized data Fixes: 385167047/clusterfuzz-testcase-minimized-ffmpeg_dem_IPMOVIE_fuzzer-5941477505564672

Michael Niedermayer committed 1 year ago

Commit 788abe01 parent 17b019c1 file · +2 −1Browse files

Unified · Split

@@ -614,7 +614,8 @@ static int ipmovie_read_header(AVFormatContext *s) · 613 unmodified lines
614	614
615	615	ipmovie->avf = s;
616	616
617		− avio_read(pb, signature_buffer, sizeof(signature_buffer));
	617	+ if (avio_read(pb, signature_buffer, sizeof(signature_buffer)) != sizeof(signature_buffer))
	618	+ return AVERROR_INVALIDDATA;
618	619	while (memcmp(signature_buffer, signature, sizeof(signature))) {
619	620	memmove(signature_buffer, signature_buffer + 1, sizeof(signature_buffer) - 1);
620	621	signature_buffer[sizeof(signature_buffer) - 1] = avio_r8(pb);

Keyboard shortcuts