mov: detect EOF in mov_read_dref()

Avoid a near infinite loop. Issue discovered by cosminamironesei.

Michael Niedermayer committed 14 years ago

Commit 9db67be1 parent 4ed5ac51 file · +2 −0Browse files

Unified · Split

@@ -416,6 +416,8 @@ static int mov_read_dref(MOVContext c, AVIOContext pb, MOVAtom atom) · 415 unmodified lines
416	avio_skip(pb, 16);	416	avio_skip(pb, 16);
417		417
418	for (type = 0; type != -1 && avio_tell(pb) < next; ) {	418	for (type = 0; type != -1 && avio_tell(pb) < next; ) {
		419	if (pb->eof_reached)
		420	return AVERROR_EOF;
419	type = avio_rb16(pb);	421	type = avio_rb16(pb);
420	len = avio_rb16(pb);	422	len = avio_rb16(pb);
421	av_log(c->fc, AV_LOG_DEBUG, "type %d, len %d\n", type, len);	423	av_log(c->fc, AV_LOG_DEBUG, "type %d, len %d\n", type, len);

Keyboard shortcuts