Browse Source

asfdec: avoid crash in the case when chunk_len is 0 or pkt_len is 0

Signed-off-by: Anton Khirnov <anton@khirnov.net>
tags/n2.8
Alexandra Hájková Anton Khirnov 10 years ago
parent
commit
2a187a074a
1 changed files with 2 additions and 0 deletions
  1. +2
    -0
      libavformat/asfdec.c

+ 2
- 0
libavformat/asfdec.c View File

@@ -776,6 +776,8 @@ static int asf_read_stream_properties(AVFormatContext *s, const GUIDParseTable *
asf_st->span = span;
asf_st->virtual_pkt_len = avio_rl16(pb);
asf_st->virtual_chunk_len = avio_rl16(pb);
if (!asf_st->virtual_chunk_len || !asf_st->virtual_pkt_len)
return AVERROR_INVALIDDATA;
avio_skip(pb, err_data_len - 5);
} else
avio_skip(pb, err_data_len - 1);


Loading…
Cancel
Save