RepoMirrors/ffmpeg
1
0
Fork 0
mirror of https://git.ffmpeg.org/ffmpeg.git synced 2025-02-01 04:13:57 +00:00
Code Issues Projects Releases Wiki Activity

stop parsing udta if size is wrong/garbage, fix issue 154, fix RQ004F14.MOV

Browse Source 
Originally committed as revision 10481 to svn://svn.ffmpeg.org/ffmpeg/trunk
This commit is contained in:
Baptiste Coudurier 2007-09-12 10:18:01 +00:00
parent 36cb992b54
commit aaac6c29d2
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
libavformat/mov.c
View File

@ -1060,6 +1060,9 @@ static int mov_read_udta(MOVContext *c, ByteIOContext *pb, MOV_atom_t atom)
uint32_t tag = get_le32(pb); uint32_t tag = get_le32(pb);
uint64_t next = url_ftell(pb) + tag_size - 8; uint64_t next = url_ftell(pb) + tag_size - 8;
if (next > end) // stop if tag_size is wrong
break;
switch (tag) { switch (tag) {
case MKTAG(0xa9,'n','a','m'): case MKTAG(0xa9,'n','a','m'):
mov_parse_udta_string(pb, c->fc->title, sizeof(c->fc->title)); mov_parse_udta_string(pb, c->fc->title, sizeof(c->fc->title));