avformat/ipmovie: Check signature_buffer read

Fixes: use of uninitilaized data Fixes: 385167047/clusterfuzz-testcase-minimized-ffmpeg_dem_IPMOVIE_fuzzer-5941477505564672

Michael Niedermayer committed 1 year ago

Commit 788abe01 parent 17b019c1 file · +2 −1Browse files

Unified · Split

libavformat/ipmovie.c+2−1

@@ -614,7 +614,8 @@ static int ipmovie_read_header(AVFormatContext *s) · 613 unmodified lines
614		614
615	ipmovie->avf = s;	615	ipmovie->avf = s;
616		616
617	avio_read(pb, signature_buffer, sizeof(signature_buffer));	617	if (avio_read(pb, signature_buffer, sizeof(signature_buffer)) != sizeof(signature_buffer))
		618	return AVERROR_INVALIDDATA;
618	while (memcmp(signature_buffer, signature, sizeof(signature))) {	619	while (memcmp(signature_buffer, signature, sizeof(signature))) {
619	memmove(signature_buffer, signature_buffer + 1, sizeof(signature_buffer) - 1);	620	memmove(signature_buffer, signature_buffer + 1, sizeof(signature_buffer) - 1);
620	signature_buffer[sizeof(signature_buffer) - 1] = avio_r8(pb);	621	signature_buffer[sizeof(signature_buffer) - 1] = avio_r8(pb);