Browse Source

pmpdec: check for EOF while reading index.

Otherwise even a tiny file can trigger a huge memory allocation.

Related to ticket #2298.

Signed-off-by: Reimar Döffinger <Reimar.Doeffinger@gmx.de>
tags/n1.2
Reimar Döffinger 12 years ago
parent
commit
50a37f9202
1 changed files with 4 additions and 0 deletions
  1. +4
    -0
      libavformat/pmpdec.c

+ 4
- 0
libavformat/pmpdec.c View File

@@ -105,6 +105,10 @@ static int pmp_header(AVFormatContext *s)
for (i = 0; i < index_cnt; i++) {
int size = avio_rl32(pb);
int flags = size & 1 ? AVINDEX_KEYFRAME : 0;
if (url_feof(pb)) {
av_log(s, AV_LOG_FATAL, "Encountered EOF while reading index.\n");
return AVERROR_INVALIDDATA;
}
size >>= 1;
av_add_index_entry(vst, pos, i, size, 0, flags);
pos += size;


Loading…
Cancel
Save