generic-library/ffmpeg
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

nsvdec: Check av_malloc(string_size)

Browse Source 
This can easily be NULL as string_size can be 2g in a damaged file.

Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
Michael Niedermayer 2011-12-29 21:31:22 +01:00
parent 3a15051aba
commit b9e0e9537a
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
libavformat/nsvdec.c
View File

@ -314,6 +314,8 @@ static int nsv_parse_NSVf_header(AVFormatContext *s, AVFormatParameters *ap)
char quote; char quote;
p = strings = av_mallocz(strings_size + 1); p = strings = av_mallocz(strings_size + 1);
if (!p)
return AVERROR(ENOMEM);
endp = strings + strings_size; endp = strings + strings_size;
avio_read(pb, strings, strings_size); avio_read(pb, strings, strings_size);
while (p < endp) { while (p < endp) {