mirror of https://git.ffmpeg.org/ffmpeg.git
lavc/mjpegdec: Do not overread too short JFIF tags.
Fixes ticket #6055.
This commit is contained in:
parent
b7a6d28e5e
commit
4acea512f3
|
@ -1670,6 +1670,8 @@ static int mjpeg_decode_app(MJpegDecodeContext *s)
|
|||
|
||||
if (id == AV_RB32("JFIF")) {
|
||||
int t_w, t_h, v1, v2;
|
||||
if (len < 8)
|
||||
goto out;
|
||||
skip_bits(&s->gb, 8); /* the trailing zero-byte */
|
||||
v1 = get_bits(&s->gb, 8);
|
||||
v2 = get_bits(&s->gb, 8);
|
||||
|
|
Loading…
Reference in New Issue