RepoMirrors/ffmpeg
1
0
Fork 0
mirror of https://git.ffmpeg.org/ffmpeg.git synced 2025-03-03 02:58:02 +00:00
Code Issues Projects Releases Wiki Activity

avformat/mov: Fix unaligned read of uint32_t and endian-dependance in mov_read_default

Browse Source 
Reviewed-by: Andreas Rheinhardt <andreas.rheinhardt@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
Zhao Zhili 2020-07-05 00:51:53 +08:00 committed by Michael Niedermayer
parent 9f7b252cdf
commit 806a4d5187
1 changed files with 5 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
libavformat/mov.c
View File

@ -6945,13 +6945,12 @@ static int mov_read_default(MOVContext *c, AVIOContext *pb, MOVAtom atom)
a.type == MKTAG('h','o','o','v')) && a.type == MKTAG('h','o','o','v')) &&
a.size >= 8 && a.size >= 8 &&
c->fc->strict_std_compliance < FF_COMPLIANCE_STRICT) { c->fc->strict_std_compliance < FF_COMPLIANCE_STRICT) {
uint8_t buf[8]; uint32_t type;
uint32_t *type = (uint32_t *)buf + 1; avio_skip(pb, 4);
if (avio_read(pb, buf, 8) != 8) type = avio_rl32(pb);
return AVERROR_INVALIDDATA;
avio_seek(pb, -8, SEEK_CUR); avio_seek(pb, -8, SEEK_CUR);
if (*type == MKTAG('m','v','h','d') || if (type == MKTAG('m','v','h','d') ||
*type == MKTAG('c','m','o','v')) { type == MKTAG('c','m','o','v')) {
av_log(c->fc, AV_LOG_ERROR, "Detected moov in a free or hoov atom.\n"); av_log(c->fc, AV_LOG_ERROR, "Detected moov in a free or hoov atom.\n");
a.type = MKTAG('m','o','o','v'); a.type = MKTAG('m','o','o','v');
} }