generic-library/ffmpeg
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

break if atom size is more than size left in container atom, fix shooter.mov

Browse Source 
Originally committed as revision 8544 to svn://svn.ffmpeg.org/ffmpeg/trunk
This commit is contained in:
Baptiste Coudurier 2007-03-29 10:37:07 +00:00
parent db56acd480
commit 62b6498df2
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
libavformat/mov.c
View File

@ -250,7 +250,7 @@ static int mov_read_default(MOVContext *c, ByteIOContext *pb, MOV_atom_t atom)
a.size -= 8;
if(a.size < 0)
if(a.size < 0 || a.size > atom.size - total_size)
break;
if (c->parse_table[i].type == 0) { /* skip leaf atoms data */