RepoMirrors/ffmpeg
1
0
Fork 0
mirror of https://git.ffmpeg.org/ffmpeg.git synced 2025-01-06 23:31:13 +00:00
Code Issues Projects Releases Wiki Activity

avformat/mov: Check if hoov is at the end

Browse Source 
Fixes: Timeout, probably infinite loop
Fixes: 26559/clusterfuzz-testcase-minimized-ffmpeg_dem_MOV_fuzzer-5391165484171264

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
Michael Niedermayer 2020-10-25 18:39:45 +01:00
parent ad20a4f92b
commit 0afbaabdca
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
libavformat/mov.c
View File

@ -7006,6 +7006,8 @@ static int mov_read_default(MOVContext *c, AVIOContext *pb, MOVAtom atom)
uint32_t type; uint32_t type;
avio_skip(pb, 4); avio_skip(pb, 4);
type = avio_rl32(pb); type = avio_rl32(pb);
if (avio_feof(pb))
break;
avio_seek(pb, -8, SEEK_CUR); avio_seek(pb, -8, SEEK_CUR);
if (type == MKTAG('m','v','h','d') || if (type == MKTAG('m','v','h','d') ||
type == MKTAG('c','m','o','v')) { type == MKTAG('c','m','o','v')) {