Check for corrupted data in avs demuxer.
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit 1cce7def0a)
			
			
This commit is contained in:
		
				
					committed by
					
						
						Michael Niedermayer
					
				
			
			
				
	
			
			
			
						parent
						
							932b5f3cbb
						
					
				
				
					commit
					c23d5261f7
				
			@@ -163,6 +163,8 @@ static int avs_read_packet(AVFormatContext * s, AVPacket * pkt)
 | 
				
			|||||||
            sub_type = avio_r8(s->pb);
 | 
					            sub_type = avio_r8(s->pb);
 | 
				
			||||||
            type = avio_r8(s->pb);
 | 
					            type = avio_r8(s->pb);
 | 
				
			||||||
            size = avio_rl16(s->pb);
 | 
					            size = avio_rl16(s->pb);
 | 
				
			||||||
 | 
					            if (size < 4)
 | 
				
			||||||
 | 
					                return AVERROR_INVALIDDATA;
 | 
				
			||||||
            avs->remaining_frame_size -= size;
 | 
					            avs->remaining_frame_size -= size;
 | 
				
			||||||
 | 
					
 | 
				
			||||||
            switch (type) {
 | 
					            switch (type) {
 | 
				
			||||||
 
 | 
				
			|||||||
		Reference in New Issue
	
	Block a user