Browse Source

avcodec/hnm4video: check that packetsize is at least 8

Fixes integer overflow and assertion failure
Fixes: signal_sigabrt_7ffff7126425_1243_CASSE.HNM

Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
tags/n2.2-rc1
Michael Niedermayer 12 years ago
parent
commit
ba992711f7
1 changed files with 5 additions and 0 deletions
  1. +5
    -0
      libavcodec/hnm4video.c

+ 5
- 0
libavcodec/hnm4video.c View File

@@ -359,6 +359,11 @@ static int hnm_decode_frame(AVCodecContext *avctx, void *data,
int ret;
uint16_t chunk_id;

if (avpkt->size < 8) {
av_log(avctx, AV_LOG_ERROR, "packet too small\n");
return AVERROR_INVALIDDATA;
}

if ((ret = ff_get_buffer(avctx, frame, 0)) < 0)
return ret;



Loading…
Cancel
Save