mov: Fix near infinite loop in stsd parsing.
Fixes Ticket768 Bug found by: Diana Elena Muscalu Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
@@ -1082,6 +1082,9 @@ int ff_mov_read_stsd_entries(MOVContext *c, AVIOContext *pb, int entries)
|
|||||||
avio_rb32(pb); /* reserved */
|
avio_rb32(pb); /* reserved */
|
||||||
avio_rb16(pb); /* reserved */
|
avio_rb16(pb); /* reserved */
|
||||||
dref_id = avio_rb16(pb);
|
dref_id = avio_rb16(pb);
|
||||||
|
}else if (size <= 0){
|
||||||
|
av_log(c->fc, AV_LOG_ERROR, "invalid size %d in stsd\n", size);
|
||||||
|
return -1;
|
||||||
}
|
}
|
||||||
|
|
||||||
if (st->codec->codec_tag &&
|
if (st->codec->codec_tag &&
|
||||||
|
Reference in New Issue
Block a user