mirror of
https://git.ffmpeg.org/ffmpeg.git
synced 2024-12-24 00:02:52 +00:00
avformat/ac4dec: Check remaining space in ac4_probe()
Fixes: CID1538298 Untrusted loop bound Fixes: undefined behavior Sponsored-by: Sovereign Tech Fund Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
parent
6f52b64bcc
commit
2f04cb673c
@ -43,6 +43,8 @@ static int ac4_probe(const AVProbeData *p)
|
||||
size += 4;
|
||||
if (buf[1] == 0x41)
|
||||
size += 2;
|
||||
if (left < size)
|
||||
break;
|
||||
max_frames++;
|
||||
left -= size;
|
||||
buf += size;
|
||||
|
Loading…
Reference in New Issue
Block a user