lavf/mov: Do not overread iTunes metadata.

Fixes ticket #4425.
This commit is contained in:
Carl Eugen Hoyos 2015-04-04 17:35:06 +02:00
parent 4b03002527
commit 072198166e
1 changed files with 1 additions and 1 deletions

View File

@ -342,7 +342,7 @@ retry:
if (c->itunes_metadata && atom.size > 8) {
int data_size = avio_rb32(pb);
int tag = avio_rl32(pb);
if (tag == MKTAG('d','a','t','a')) {
if (tag == MKTAG('d','a','t','a') && data_size <= atom.size) {
data_type = avio_rb32(pb); // type
avio_rb32(pb); // unknown
str_size = data_size - 16;